landlock security module · Supported

Maintainers

• M Mickaël Salaün <mic@digikod.net>
• R Günther Noack <gnoack@google.com>

Paths

• F Documentation/admin-guide/LSM/landlock.rst
• F Documentation/security/landlock.rst
• F Documentation/userspace-api/landlock.rst
• F fs/ioctl.c
• F include/uapi/linux/landlock.h
• F samples/landlock/
• F security/landlock/
• F tools/testing/selftests/landlock/

Last 30 days

Active reviewers (last 30 days)

• Stephen Smalley <stephen.smalley.work@gmail.com>
  2 attestations (2 Reviewed-by) · last on 2026-05-09

Recent patches

Most-recent 30 patches in this subsystem on selinux (capped at 30), ordered by date desc.

• [PATCH v4 5/7] landlock: Convert from sb_mount to granular mount hooks
  2026-05-15 · Song Liu <song@kernel.org>
• [PATCH v3 7/7] lsm: Remove security_sb_mount and security_move_mount
  2026-05-09 · Song Liu <song@kernel.org>
• [PATCH v3 5/7] landlock: Convert from sb_mount to granular mount hooks
  2026-05-09 · Song Liu <song@kernel.org>
• [PATCH v2 7/7] lsm: Remove security_sb_mount and security_move_mount
  2026-04-30 · Song Liu <song@kernel.org>
• [PATCH v2 5/7] landlock: Convert from sb_mount to granular mount hooks
  2026-04-30 · Song Liu <song@kernel.org>
• [PATCH 7/7] lsm: Remove security_sb_mount and security_move_mount
  2026-03-18 · Song Liu <song@kernel.org>
• [PATCH 5/7] landlock: Convert from sb_mount to granular mount hooks
  2026-03-18 · Song Liu <song@kernel.org>
• [PATCH] lsm: move inode IS_PRIVATE checks to individual LSMs
  2026-02-20 · <hidden>
• [PATCH v19] exec: Fix dead-lock in de_thread with ptrace_attach
  2025-12-19 · Bernd Edlinger <hidden>
• [PATCH v5 08/34] lsm: replace the name field with a pointer to the lsm_id struct
  2025-10-17 · Paul Moore <paul@paul-moore.com>
• [PATCH v4 08/34] lsm: replace the name field with a pointer to the lsm_id struct
  2025-09-16 · Paul Moore <paul@paul-moore.com>
• [PATCH v3 08/34] lsm: replace the name field with a pointer to the lsm_id struct
  2025-08-14 · Paul Moore <paul@paul-moore.com>
• [RFC PATCH v2 08/34] lsm: replace the name field with a pointer to the lsm_id struct
  2025-07-21 · Paul Moore <paul@paul-moore.com>
• [RFC] vfs: security: Parse dev_name before calling security_sb_mount
  2025-07-08 · Song Liu <song@kernel.org>
• [PATCH v6 1/6] fs: split fileattr related helpers into separate file
  2025-06-30 · Andrey Albershteyn <hidden>
• [PATCH v2 bpf-next 3/4] af_unix: Pass skb to security_unix_may_send().
  2025-06-13 · Kuniyuki Iwashima <hidden>
• [PATCH v2 bpf-next 2/4] af_unix: Call security_unix_may_send() in sendmsg() for all socket types
  2025-06-13 · Kuniyuki Iwashima <hidden>
• [PATCH v2 bpf-next 1/4] af_unix: Don't pass struct socket to security_unix_may_send().
  2025-06-13 · Kuniyuki Iwashima <hidden>
• Re: [PATCH v5 0/7] fs: introduce file_getattr and file_setattr syscalls
  2025-05-15 · Christian Brauner <brauner@kernel.org>
• [PATCH v5 1/7] fs: split fileattr related helpers into separate file
  2025-05-13 · Andrey Albershteyn <hidden>
• [PATCH v5 1/7] fs: split fileattr related helpers into separate file
  2025-05-12 · Andrey Albershteyn <hidden>
• [PATCH v5 1/7] fs: split fileattr related helpers into separate file
  2025-05-12 · Andrey Albershteyn <hidden>
• [PATCH v1 bpf-next 2/5] af_unix: Pass skb to security_unix_may_send().
  2025-05-05 · Kuniyuki Iwashima <hidden>
• [PATCH v1 bpf-next 1/5] af_unix: Call security_unix_may_send() in sendmsg() for all socket types
  2025-05-05 · Kuniyuki Iwashima <hidden>
• [RFC PATCH 29/29] lsm: add support for counting lsm_prop support among LSMs
  2025-04-09 · Paul Moore <paul@paul-moore.com>
• [RFC PATCH 05/29] lsm: replace the name field with a pointer to the lsm_id struct
  2025-04-09 · Paul Moore <paul@paul-moore.com>
• [PATCH v4 1/3] lsm: introduce new hooks for setting/getting inode fsxattr
  2025-03-21 · Andrey Albershteyn <hidden>
• [RFC PATCH 3/6] landlock: explicitly skip mediation of O_PATH file descriptors
  2025-03-12 · Ryan Lee <hidden>
• [PATCH v2 2/2] security: remove unused cred_alloc_blank/cred_transfer helpers
  2024-08-05 · Jann Horn <jannh@google.com>
• [PATCH RFC] security/KEYS: get rid of cred_alloc_blank and cred_transfer
  2024-08-02 · Jann Horn <jannh@google.com>

Quiet for 30+ days

Patches with no review trailers and no replies. Either the author is heads-down elsewhere or these slipped through. Oldest first.

• [PATCH v19] exec: Fix dead-lock in de_thread with ptrace_attach
  2025-12-19 · Bernd Edlinger <hidden>
• [PATCH 5/7] landlock: Convert from sb_mount to granular mount hooks
  2026-03-18 · Song Liu <song@kernel.org>