selinux security module · Supported

Maintainers

• M Paul Moore <paul@paul-moore.com>
• M Stephen Smalley <stephen.smalley.work@gmail.com>
• R Ondrej Mosnacek <omosnace@redhat.com>

Paths

• F Documentation/ABI/removed/sysfs-selinux-checkreqprot
• F Documentation/ABI/removed/sysfs-selinux-disable
• F Documentation/admin-guide/LSM/SELinux.rst
• F include/trace/events/avc.h
• F include/uapi/linux/selinux_netlink.h
• F scripts/selinux/
• F security/selinux/

Last 30 days

Recent patches

Most-recent 30 patches in this subsystem on netdev (capped at 30), ordered by date desc.

• HOTtoday [PATCH 16/18] xfrm: add XFRM_MSG_MIGRATE_STATE for single SA migration
  2026-06-12 · Steffen Klassert <steffen.klassert@secunet.com>
• COLD15d [PATCH ipsec-next v9 14/16] xfrm: add XFRM_MSG_MIGRATE_STATE for single SA migration
  2026-05-26 · Antony Antony <hidden>
• COLD29d [PATCH ipsec-next v8 12/14] xfrm: add XFRM_MSG_MIGRATE_STATE for single SA migration
  2026-05-05 · Antony Antony <hidden>
• STALE73d [PATCH ipsec-next v7 12/14] xfrm: add XFRM_MSG_MIGRATE_STATE for single SA migration
  2026-04-12 · Antony Antony <hidden>
• STALE104d [PATCH ipsec-next v6 12/14] xfrm: add XFRM_MSG_MIGRATE_STATE for single SA migration
  2026-03-09 · Antony Antony <hidden>
• STALE100d [PATCH v3 12/12] treewide: change inode->i_ino from unsigned long to u64
  2026-03-04 · Jeff Layton <jlayton@kernel.org>
• STALE112d [PATCH v2 105/110] security: replace PRIino with %llu/%llx format strings
  2026-03-02 · Jeff Layton <jlayton@kernel.org>
• STALE112d [PATCH v2 049/110] security: use PRIino format for i_ino
  2026-03-02 · Jeff Layton <jlayton@kernel.org>
• STALE117d [PATCH 51/61] security: update audit format strings for u64 i_ino
  2026-02-26 · Jeff Layton <jlayton@kernel.org>
• STALE78d [PATCH ipsec-next v5 8/8] xfrm: add XFRM_MSG_MIGRATE_STATE for single SA migration
  2026-01-27 · Antony Antony <hidden>
• STALE152d [PATCH ipsec-next v4 5/5] xfrm: add XFRM_MSG_MIGRATE_STATE for single SA migration
  2026-01-19 · Antony Antony <hidden>
• STALE156d [PATCH ipsec-next v2 4/4] xfrm: add XFRM_MSG_MIGRATE_STATE for single SA migration
  2026-01-17 · Antony Antony <hidden>
• DORMANTno replies [PATCH ipsec-next v2 4/4] xfrm: add XFRM_MSG_MIGRATE_STATE for single SA migration
  2026-01-15 · Antony Antony <hidden>
• STALE159d [PATCH ipsec-next 4/6] xfrm: add XFRM_MSG_MIGRATE_STATE for single SA migration
  2026-01-09 · Antony Antony <hidden>
• STALE205d [PATCH RFC ipsec-next 3/5] xfrm: new method XFRM_MSG_MIGRATE_STATE
  2025-11-25 · Antony Antony <hidden>
• STALE279d LANDED: 1 (0M) [PATCH v2 2/4] copy_process: pass clone_flags as u64 across calltree
  2025-09-01 · Simon Schuster via B4 Relay <devnull+schuster.simon.siemens-energy.com@kernel.org>
• STALE286d [PATCH v7 42/42] selinux: disallow writes to /sys/fs/selinux/user in non-init namespaces
  2025-08-14 · Stephen Smalley <stephen.smalley.work@gmail.com>
• STALE286d [PATCH v7 41/42] selinux: convert nlmsg_sock_has_extended_perms() to namespace-aware
  2025-08-14 · Stephen Smalley <stephen.smalley.work@gmail.com>
• STALE286d [PATCH v7 39/42] selinux: make open_perms namespace-aware
  2025-08-14 · Stephen Smalley <stephen.smalley.work@gmail.com>
• STALE286d [PATCH v7 40/42] selinux: split cred_ssid_has_perm() into two cases
  2025-08-14 · Stephen Smalley <stephen.smalley.work@gmail.com>
• STALE286d [PATCH v7 38/42] selinux: switch selinux_lsm_setattr() checks to current namespace
  2025-08-14 · Stephen Smalley <stephen.smalley.work@gmail.com>
• STALE286d [PATCH v7 37/42] selinux: convert xfrm and netlabel permission checks
  2025-08-14 · Stephen Smalley <stephen.smalley.work@gmail.com>
• STALE286d [PATCH v7 35/42] selinux: annotate selinuxfs permission checks
  2025-08-14 · Stephen Smalley <stephen.smalley.work@gmail.com>
• STALE286d [PATCH v7 36/42] selinux: annotate process transition permission checks
  2025-08-14 · Stephen Smalley <stephen.smalley.work@gmail.com>
• STALE286d [PATCH v7 34/42] selinux: introduce selinux_state_has_perm()
  2025-08-14 · Stephen Smalley <stephen.smalley.work@gmail.com>
• STALE286d [PATCH v7 33/42] selinux: convert additional checks to cred_ssid_has_perm()
  2025-08-14 · Stephen Smalley <stephen.smalley.work@gmail.com>
• STALE286d [PATCH v7 32/42] selinux: update cred_tsid_has_perm_noaudit() to return the combined avd
  2025-08-14 · Stephen Smalley <stephen.smalley.work@gmail.com>
• STALE286d [PATCH v7 31/42] selinux: rename cred_has_perm*() to cred_tsid_has_perm*()
  2025-08-14 · Stephen Smalley <stephen.smalley.work@gmail.com>
• STALE286d [PATCH v7 30/42] selinux: convert selinux_file_send_sigiotask() to namespace-aware helper
  2025-08-14 · Stephen Smalley <stephen.smalley.work@gmail.com>
• STALE286d [PATCH v7 29/42] selinux: add kerneldoc to new permission checking functions
  2025-08-14 · Stephen Smalley <stephen.smalley.work@gmail.com>

Quiet for 30+ days

Patches with no review trailers and no replies. Either the author is heads-down elsewhere or these slipped through. Oldest first.

• DORMANTno replies [PATCH ipsec-next v2 4/4] xfrm: add XFRM_MSG_MIGRATE_STATE for single SA migration
  2026-01-15 · Antony Antony <hidden>
• STALE73d [PATCH ipsec-next v7 12/14] xfrm: add XFRM_MSG_MIGRATE_STATE for single SA migration
  2026-04-12 · Antony Antony <hidden>