Changes in Kconfig

c17ee635fd3a482b2ad2bf5e269755c2eae5f25e - Merge drm/drm-fixes into drm-misc-fixes

Mon, 23 Feb 2026 09:09:45 +0000

Merge drm/drm-fixes into drm-misc-fixes7.0-rc1 was just released, let's merge it to kick the new release cycle.Signed-off-by: Maxime Ripard List of files: /linux/security/Kconfig

a4a508df2aa34f8650afde54ea804321c618f45f - Merge tag 'v6.18' into next

Sat, 13 Dec 2025 09:18:20 +0000

Merge tag 'v6.18' into nextSync up with the mainline to bring in the latest APIs. List of files: /linux/security/Kconfig

6179d7a630c2747e2a9329149de2a7aa67a95978 - Merge tag 'caps-pr-20260213' of git://git.kernel.org/pub/scm/linux/kernel/git/sergeh/linux

Sat, 14 Feb 2026 19:30:05 +0000

Merge tag 'caps-pr-20260213' of git://git.kernel.org/pub/scm/linux/kernel/git/sergeh/linuxPull capabilities updates from Serge Hallyn: - add KUnit tests for some core capabilities helpers - avoid emitting IPC audit messages when there's not actually a permission being denied* tag 'caps-pr-20260213' of git://git.kernel.org/pub/scm/linux/kernel/git/sergeh/linux: ipc: don't audit capability check in ipc_permissions() security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns List of files: /linux/security/Kconfig

24e9b431b5837bc9d2cf2c2fde4abf507e2fae19 - security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns

Wed, 07 Jan 2026 21:51:28 +0000

security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentnsAdd comprehensive KUnit tests for the namespace-related capabilityfunctions that Serge Hallyn refactored in commit 9891d2f79a9f("Clarify the rootid_owns_currentns").The tests verify:- Basic functionality: UID 0 in init namespace, invalid vfsuid, non-zero UIDs- Actual namespace traversal: Creating user namespaces with different UID mappings where uid 0 maps to different kuids (e.g., 1000, 2000, 3000)- Hierarchy traversal: Testing multiple nested namespaces to verify correct namespace hierarchy traversalThis addresses the feedback to "test the actual functionality" bycreating real user namespaces with different values for thenamespace's uid 0, rather than just basic input validation.The test file is included at the end of commoncap.c whenCONFIG_SECURITY_COMMONCAP_KUNIT_TEST is enabled, following thestandard kernel pattern (e.g., scsi_lib.c, ext4/mballoc.c). Thisallows tests to access static functions in the same compilation unitwithout modifying production code based on test configuration.The tests require CONFIG_USER_NS to be enabled since they rely on usernamespace mapping functionality. The Kconfig dependency ensures thetests only build when this requirement is met.All 7 tests pass:- test_vfsuid_root_in_currentns_init_ns- test_vfsuid_root_in_currentns_invalid- test_vfsuid_root_in_currentns_nonzero- test_kuid_root_in_ns_init_ns_uid0- test_kuid_root_in_ns_init_ns_nonzero- test_kuid_root_in_ns_with_mapping- test_kuid_root_in_ns_with_different_mappingsUpdated MAINTAINER capabilities to include commoncap testSigned-off-by: Ryan Foster Signed-off-by: Serge Hallyn List of files: /linux/security/Kconfig

2ace52718376fdb56aca863da2eebe70d7e2ddb1 - Merge branch 'objtool/core'

Fri, 21 Nov 2025 10:21:20 +0000

Merge branch 'objtool/core'Bring in the UDB and objtool data annotations to avoid conflicts while further extending the bug exceptions.Signed-off-by: Peter Zijlstra List of files: /linux/security/Kconfig

f39b6c468c52745dbca9a842d91c8373fda208ab - Merge tag 'v6.18-rc6' into for-linus

Tue, 18 Nov 2025 07:16:55 +0000

Merge tag 'v6.18-rc6' into for-linusSync up with the mainline to bring in definition ofINPUT_PROP_HAPTIC_TOUCHPAD. List of files: /linux/security/Kconfig

cb9f145f638d7afa633632a9290d6ad06caeb8ee - Merge remote-tracking branch 'drm/drm-next' into msm-next-robclark

Sat, 01 Nov 2025 12:47:30 +0000

Merge remote-tracking branch 'drm/drm-next' into msm-next-robclarkBack-merge drm-next to get caught up.Signed-off-by: Rob Clark List of files: /linux/security/Kconfig

ec2e0fb07d789976c601bec19ecced7a501c3705 - Merge tag 'asoc-fix-v6.18-rc1' of https://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into for-linus

Thu, 16 Oct 2025 18:14:24 +0000

Merge tag 'asoc-fix-v6.18-rc1' of https://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into for-linusASoC: Fixes for v6.18A moderately large collection of driver specific fixes, plus a few newquirks and device IDs. The NAU8821 changes are a little large but morein mechanical ways than in ways that are complex. List of files: /linux/security/Kconfig

82ee50252dc891e3f3b32d923bb4f656d300b772 - Merge drm/drm-next into drm-xe-next

Tue, 14 Oct 2025 09:31:49 +0000

Merge drm/drm-next into drm-xe-nextBackmerging to bring in 6.18-rc1.Signed-off-by: Thomas Hellström List of files: /linux/security/Kconfig

48a710760e10a4f36e11233a21860796ba204b1e - Merge drm/drm-fixes into drm-misc-fixes

Tue, 14 Oct 2025 08:59:58 +0000

Merge drm/drm-fixes into drm-misc-fixesUpdating drm-misc-fixes to the state of v6.18-rc1.Signed-off-by: Thomas Zimmermann List of files: /linux/security/Kconfig

2acee98fcc61052d63fab4539fcb6ee677555645 - Merge drm/drm-next into drm-intel-next

Tue, 14 Oct 2025 07:37:11 +0000

Merge drm/drm-next into drm-intel-nextSync to v6.18-rc1.Signed-off-by: Jani Nikula List of files: /linux/security/Kconfig

4f38da1f027ea2c9f01bb71daa7a299c191b6940 - spi: Merge up v6.18-rc1

Mon, 13 Oct 2025 12:32:13 +0000

spi: Merge up v6.18-rc1Ensure my CI has a sensible baseline. List of files: /linux/security/Kconfig

9b966ae42235a88eaea714be09ff3d698535bdfe - Merge drm/drm-next into drm-misc-next

Mon, 13 Oct 2025 07:19:19 +0000

Merge drm/drm-next into drm-misc-nextUpdating drm-misc-next to the state of v6.18-rc1.Signed-off-by: Thomas Zimmermann List of files: /linux/security/Kconfig

76f01a4f22c465bdb63ee19aaf5b682c5893ba96 - Merge tag 'lsm-pr-20250926' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsm

Tue, 30 Sep 2025 15:48:29 +0000

Merge tag 'lsm-pr-20250926' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsmPull lsm updates from Paul Moore: - Move the management of the LSM BPF security blobs into the framework In order to enable multiple LSMs we need to allocate and free the various security blobs in the LSM framework and not the individual LSMs as they would end up stepping all over each other. - Leverage the lsm_bdev_alloc() helper in lsm_bdev_alloc() Make better use of our existing helper functions to reduce some code duplication. - Update the Rust cred code to use 'sync::aref' Part of a larger effort to move the Rust code over to the 'sync' module. - Make CONFIG_LSM dependent on CONFIG_SECURITY As the CONFIG_LSM Kconfig setting is an ordered list of the LSMs to enable a boot, it obviously doesn't make much sense to enable this when CONFIG_SECURITY is disabled. - Update the LSM and CREDENTIALS sections in MAINTAINERS with Rusty bits Add the Rust helper files to the associated LSM and CREDENTIALS entries int the MAINTAINERS file. We're trying to improve the communication between the two groups and making sure we're all aware of what is going on via cross-posting to the relevant lists is a good way to start.* tag 'lsm-pr-20250926' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsm: lsm: CONFIG_LSM can depend on CONFIG_SECURITY MAINTAINERS: add the associated Rust helper to the CREDENTIALS section MAINTAINERS: add the associated Rust helper to the LSM section rust,cred: update AlwaysRefCounted import to sync::aref security: use umax() to improve code lsm,selinux: Add LSM blob support for BPF objects lsm: use lsm_blob_alloc() in lsm_bdev_alloc() List of files: /linux/security/Kconfig

54d94c422fed9575b74167333c1757847a4e6899 - lsm: CONFIG_LSM can depend on CONFIG_SECURITY

Sun, 24 Aug 2025 22:28:00 +0000

lsm: CONFIG_LSM can depend on CONFIG_SECURITYWhen CONFIG_SECURITY is not set, CONFIG_LSM (builtin_lsm_order) doesnot need to be visible and settable since builtin_lsm_order is defined insecurity.o, which is only built when CONFIG_SECURITY=y.So make CONFIG_LSM depend on CONFIG_SECURITY.Fixes: 13e735c0e953 ("LSM: Introduce CONFIG_LSM")Signed-off-by: Randy Dunlap [PM: subj tweak]Signed-off-by: Paul Moore List of files: /linux/security/Kconfig

4f9786035f9e519db41375818e1d0b5f20da2f10 - Merge branch 'next' into for-linus

Mon, 02 Jun 2025 04:41:07 +0000

Merge branch 'next' into for-linusPrepare input updates for 6.16 merge window. List of files: /linux/security/Kconfig

bbfd5594756011167b8f8de9a00e0c946afda1e6 - Merge drm/drm-next into drm-intel-gt-next

Wed, 28 May 2025 07:20:17 +0000

Merge drm/drm-next into drm-intel-gt-nextNeed to pull in a67221b5eb8d ("drm/i915/dp: Return min bpc supported by source instead of 0")in order to fix build breakage on GCC 9.4.0 (from Ubuntu 20.04).Signed-off-by: Joonas Lahtinen List of files: /linux/security/Kconfig

db5302ae571beec635c1a96e7f72926a4e65195e - Merge drm/drm-next into drm-intel-next

Fri, 16 May 2025 07:22:36 +0000

Merge drm/drm-next into drm-intel-nextBackmerge to sync with v6.15-rc, xe, and specifically async flip changesin drm-misc.Signed-off-by: Jani Nikula List of files: /linux/security/Kconfig

d51b9d81f7883f526b26e3ab903e646274aebeb1 - Merge tag 'v6.15-rc6' into next

Thu, 15 May 2025 23:20:39 +0000

Merge tag 'v6.15-rc6' into nextSync up with mainline to bring in xpad controller changes. List of files: /linux/security/Kconfig

844e31bbaef7c8a6ff2c0fbac45c0c85b5484482 - Merge remote-tracking branch 'drm-misc/drm-misc-next' into msm-next

Tue, 29 Apr 2025 20:42:29 +0000

Merge remote-tracking branch 'drm-misc/drm-misc-next' into msm-nextMerge drm-misc-next to get commit Fixes: fec450ca15af ("drm/display:hdmi: provide central data authority for ACR params").Signed-off-by: Rob Clark List of files: /linux/security/Kconfig