security subsystem · Supported

Maintainers

• M Paul Moore <paul@paul-moore.com>
• M James Morris <jmorris@namei.org>
• M "Serge E. Hallyn" <serge@hallyn.com>

Paths

• F include/linux/lsm/
• F include/linux/lsm_audit.h
• F include/linux/lsm_hook_defs.h
• F include/linux/lsm_hooks.h
• F include/linux/security.h
• F include/uapi/linux/lsm.h
• F security/
• F tools/testing/selftests/lsm/
• F rust/kernel/security.rs
• X security/selinux/

Last 30 days

Most active threads (last 7 days)

• HOTtoday [PATCH 0/2] Bring includes in linux/kmod.h up to date
  2026-07-08 15:46 · 1 reply in 7d · Petr Pavlu <petr.pavlu@suse.com>
• COOLING5d [RFC PATCH 0/3] coredump, net: fix layer violation with direct connection
  2026-07-03 07:40 · 1 reply in 7d · John Ericson <hidden>
• COOLING5d [PATCH net 0/4] rxrpc: Fix CHALLENGE packet handling
  2026-07-02 14:49 · 1 reply in 7d · David Howells <dhowells@redhat.com>
• COOLING6d IN LINUX-NEXT Landlock: LANDLOCK_ACCESS_NET_CONNECT_TCP bypass via TCP Fast Open
  2026-07-01 21:46 · 1 reply in 7d · Bryam Vargas <hidden>

Recent patches

Most-recent 30 patches in this subsystem on netdev (capped at 30), ordered by date desc.

• HOTtoday [PATCH 1/2] umh, treewide: Explicitly include linux/umh.h where needed
  2026-07-08 · Petr Pavlu <petr.pavlu@suse.com>
• COOLING5d [RFC PATCH 3/3] coredump, net: remove `SOCK_COREDUMP`
  2026-07-03 · John Ericson <hidden>
• COOLING5d [PATCH net 4/4] rxrpc: Fix CHALLENGE packet overqueuing and simplify RESPONSE generation
  2026-07-02 · David Howells <dhowells@redhat.com>
• COOLING6d [PATCH v2 1/2] landlock: fix TCP Fast Open connection bypass
  2026-07-01 · Matthieu Buffet <hidden>
• DORMANTno replies Re: [PATCH] tomoyo: Enforce connect policy in TCP Fast Open
  2026-06-27 · Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
• COOLING11d [PATCH] tomoyo: Enforce connect policy in TCP Fast Open
  2026-06-19 · Matthieu Buffet <hidden>
• COOLING6d IN LINUX-NEXT [RFC PATCH 1/2] landlock: fix TCP Fast Open connection bypass
  2026-06-17 · Matthieu Buffet <hidden>
• DORMANTno replies Re: [PATCH v5 2/6] landlock: Add UDP send+connect access control
  2026-06-13 · Mickaël Salaün <mic@digikod.net>
• COLD24d [PATCH v5 2/6] landlock: Add UDP send+connect access control
  2026-06-11 · Matthieu Buffet <hidden>
• COLD24d [PATCH v5 1/6] landlock: Add UDP bind() access control
  2026-06-11 · Matthieu Buffet <hidden>
• COLD27d [PATCH 08/11] params: Convert generic kernel_param_ops .get helpers to seq_buf
  2026-05-21 · Kees Cook <kees@kernel.org>
• COLD27d [PATCH 09/11] treewide: Convert custom kernel_param_ops .get callbacks to seq_buf via cocci
  2026-05-21 · Kees Cook <kees@kernel.org>
• COLD27d [PATCH 04/11] treewide: Convert struct kernel_param_ops initializers to DEFINE_KERNEL_PARAM_OPS
  2026-05-21 · Kees Cook <kees@kernel.org>
• COLD47d Re: [RFC PATCH v4 01/19] landlock: Support socket access-control
  2026-05-08 · Mickaël Salaün <mic@digikod.net>
• COLD27d [PATCH v4 1/7] landlock: Add UDP bind() access control
  2026-05-02 · Matthieu Buffet <hidden>
• COLD27d [PATCH v4 3/7] landlock: Add UDP send access control
  2026-05-02 · Matthieu Buffet <hidden>
• COLD27d [PATCH v4 2/7] landlock: Add UDP connect() access control
  2026-05-02 · Matthieu Buffet <hidden>
• STALE96d LANDED [PATCH v8 01/12] lsm: Add LSM hook security_unix_find
  2026-03-27 · Günther Noack <hidden>
• STALE99d [PATCH net v3 04/11] list: Move on_list_rcu() to list.h and add on_list() also
  2026-03-26 · David Howells <dhowells@redhat.com>
• STALE106d [PATCH v7 01/11] lsm: Add LSM hook security_unix_find
  2026-03-23 · Günther Noack <hidden>
• STALE106d [PATCH net v2 04/10] list: Move on_list_rcu() to list.h and add on_list() also
  2026-03-23 · David Howells <dhowells@redhat.com>
• STALE106d [PATCH v7 1/9] lsm: Add LSM hook security_unix_find
  2026-03-17 · Justin Suess <hidden>
• STALE106d [PATCH v6 1/9] lsm: Add LSM hook security_unix_find
  2026-03-15 · Günther Noack <hidden>
• STALE116d REVIEWED: 2 (2M) [PATCH v3 net-next 06/15] smack: Remove IPPROTO_UDPLITE support in security_sock_rcv_skb().
  2026-03-11 · Kuniyuki Iwashima <kuniyu@google.com>
• STALE111d [PATCH v2 2/2] tree-wide: rename do_exit() to task_exit()
  2026-03-10 · Christian Brauner <brauner@kernel.org>
• STALE83d [PATCH 20/61] apparmor: Prefer IS_ERR_OR_NULL over manual NULL check
  2026-03-10 · Philipp Hahn <hidden>
• STALE113d Re: [PATCH v3 00/12] vfs: change inode->i_ino from unsigned long to u64
  2026-03-09 · Jeff Layton <jlayton@kernel.org>
• STALE119d REVIEWED: 2 (2M) [PATCH v2 net-next 06/15] smack: Remove IPPROTO_UDPLITE support in security_sock_rcv_skb().
  2026-03-05 · Kuniyuki Iwashima <kuniyu@google.com>
• STALE124d [PATCH v1 net-next 06/15] smack: Remove IPPROTO_UDPLITE support in security_sock_rcv_skb().
  2026-03-04 · Kuniyuki Iwashima <kuniyu@google.com>
• STALE113d [PATCH v3 12/12] treewide: change inode->i_ino from unsigned long to u64
  2026-03-04 · Jeff Layton <jlayton@kernel.org>

Quiet for 30+ days

Patches with no review trailers and no replies. Either the author is heads-down elsewhere or these slipped through. Oldest first.

• STALE144d [RFC PATCH v3 5/8] landlock: Add UDP sendmsg access control
  2025-12-12 · Matthieu Buffet <hidden>
• STALE144d LANDED [RFC PATCH v3 2/8] landlock: Refactor TCP socket type check
  2025-12-12 · Matthieu Buffet <hidden>
• STALE144d [RFC PATCH v3 3/8] landlock: Add UDP bind+connect access control
  2025-12-12 · Matthieu Buffet <hidden>
• STALE143d Re: [PATCH v4 1/6] lsm: Add LSM hook security_unix_find
  2026-02-10 · Justin Suess <hidden>
• STALE83d [PATCH 20/61] apparmor: Prefer IS_ERR_OR_NULL over manual NULL check
  2026-03-10 · Philipp Hahn <hidden>
• COLD27d [PATCH v4 1/7] landlock: Add UDP bind() access control
  2026-05-02 · Matthieu Buffet <hidden>