Changes in lsm.h

c17ee635fd3a482b2ad2bf5e269755c2eae5f25e - Merge drm/drm-fixes into drm-misc-fixes

Mon, 23 Feb 2026 09:09:45 +0000

Merge drm/drm-fixes into drm-misc-fixes7.0-rc1 was just released, let's merge it to kick the new release cycle.Signed-off-by: Maxime Ripard List of files: /linux/security/lsm.h

d08008f196107a80c4e88b866d594b88a56ceaa9 - Merge tag 'asoc-fix-v7.0-merge-window' of https://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into for-linus

Thu, 19 Feb 2026 11:08:48 +0000

Merge tag 'asoc-fix-v7.0-merge-window' of https://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into for-linusASoC: Fixes for v7.0 merge windowA reasonably small set of fixes and quriks that came in during the mergewindow, there's one more pending that I'll send tomorrow if you didn'tsend a PR already. List of files: /linux/security/lsm.h

f14c94d21f3ffcd6652217c2c74a26b6ba9ad741 - ASoC: Merge up release

Tue, 10 Feb 2026 19:23:02 +0000

ASoC: Merge up releaseWe need to fix some commits that went into the final release. List of files: /linux/security/lsm.h

a182a62ff77f705f7dd3d98cf05cb3d03751a8f0 - Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

Fri, 23 Jan 2026 04:13:25 +0000

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netCross-merge networking fixes after downstream PR (net-6.19-rc9).No adjacent changes, conflicts:drivers/net/ethernet/spacemit/k1_emac.c 3125fc1701694 ("net: spacemit: k1-emac: fix jumbo frame support") f66086798f91f ("net: spacemit: Remove broken flow control support")https://lore.kernel.org/aYIysFIE9ooavWia@sirena.org.ukSigned-off-by: Jakub Kicinski List of files: /linux/security/lsm.h

cc4adab164b772a34b3340d644b7c4728498581e - Merge tag 'v6.19-rc1' into msm-next

Tue, 20 Jan 2026 22:06:55 +0000

Merge tag 'v6.19-rc1' into msm-nextMerge Linux 6.19-rc1 in order to catch up with other changes (e.g. UBWCconfig database defining UBWC_6).Signed-off-by: Dmitry Baryshkov List of files: /linux/security/lsm.h

5add3c3c280a35f7e258e9cef7607db5a2e56fdc - Merge drm/drm-next into drm-xe-next

Fri, 19 Dec 2025 10:51:22 +0000

Merge drm/drm-next into drm-xe-nextBackmerging to bring in 6.19-rc1. An important upstream bugfix andto help unblock PTL CI.Signed-off-by: Thomas Hellström List of files: /linux/security/lsm.h

b8304863a3990d0f18c38e5b94191830a63ee1af - Merge drm/drm-next into drm-intel-next

Mon, 15 Dec 2025 13:24:02 +0000

Merge drm/drm-next into drm-intel-nextSync-up some display code needed for Async flips refactor.Signed-off-by: Rodrigo Vivi List of files: /linux/security/lsm.h

7f790dd21a931c61167f7bdc327aecf2cebad327 - Merge drm/drm-next into drm-misc-next

Mon, 15 Dec 2025 08:27:39 +0000

Merge drm/drm-next into drm-misc-nextLet's kickstart the v6.20 (7.0?) release cycle.Signed-off-by: Maxime Ripard List of files: /linux/security/lsm.h

dee65f79364c18033cabdf0728c7e7025405cf40 - Merge tag 'lsm-pr-20260202' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsm

Mon, 02 Feb 2026 17:48:23 +0000

Merge tag 'lsm-pr-20260202' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsmPull lsm fix from Paul Moore: "A small patch to address a regression found in the v6.19-rcX releases where the /proc/sys/vm/mmap_min_addr tunable disappeared when CONFIG_SECURITY was not selected. Long term we plan to work with the MM folks to get the core parts of this moved over to the MM subsystem, but in the meantime we need to fix this regression prior to the v6.19 release"* tag 'lsm-pr-20260202' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsm: lsm: preserve /proc/sys/vm/mmap_min_addr when !CONFIG_SECURITY List of files: /linux/security/lsm.h

bdde21d3e77da55121885fd2ef42bc6a15ac2f0c - lsm: preserve /proc/sys/vm/mmap_min_addr when !CONFIG_SECURITY

Thu, 29 Jan 2026 18:31:56 +0000

lsm: preserve /proc/sys/vm/mmap_min_addr when !CONFIG_SECURITYWhile reworking the LSM initialization code the/proc/sys/vm/mmap_min_addr handler was inadvertently caught up in thechange and the procfs entry wasn't setup when CONFIG_SECURITY was notselected at kernel build time. This patch restores the previous behaviorand ensures that the procfs entry is setup regardless of theCONFIG_SECURITY state.Future work will improve upon this, likely by moving the procfs handlerinto the mm subsystem, but this patch should resolve the immediateregression.Fixes: 4ab5efcc2829 ("lsm: consolidate all of the LSM framework initcalls")Reported-by: Lorenzo Stoakes Reviewed-by: Lorenzo Stoakes Tested-by: Lorenzo Stoakes Reviewed-by: Kees Cook Signed-off-by: Paul Moore List of files: /linux/security/lsm.h

24f171c7e145f43b9f187578e89b0982ce87e54c - Merge tag 'asoc-fix-v6.19-rc1' of https://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into for-linus

Sun, 21 Dec 2025 10:11:11 +0000

Merge tag 'asoc-fix-v6.19-rc1' of https://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into for-linusASoC: Fixes for v6.19We've been quite busy with fixes since the merge window, though not inany particularly exciting ways - the standout thing is the fix for _SXcontrols which were broken by a change to how we do clamping, otherwiseit's all fairly run of the mill fixes and quirks. List of files: /linux/security/lsm.h

84318277d6334c6981ab326d4acc87c6a6ddc9b8 - Merge remote-tracking branch 'drm/drm-fixes' into drm-misc-fixes

Mon, 15 Dec 2025 11:53:27 +0000

Merge remote-tracking branch 'drm/drm-fixes' into drm-misc-fixesPull in rc1 to include all changes since the merge window closed,and grab all fixes and changes from drm/drm-next.Signed-off-by: Maarten Lankhorst List of files: /linux/security/lsm.h

121cc35cfb55ab0bcf04c8ba6b364a0990eb2449 - Merge tag 'lsm-pr-20251201' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsm

Wed, 03 Dec 2025 17:53:48 +0000

Merge tag 'lsm-pr-20251201' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsmPull LSM updates from Paul Moore: - Rework the LSM initialization code What started as a "quick" patch to enable a notification event once all of the individual LSMs were initialized, snowballed a bit into a 30+ patch patchset when everything was done. Most of the patches, and diffstat, is due to splitting out the initialization code into security/lsm_init.c and cleaning up some of the mess that was there. While not strictly necessary, it does cleanup the code signficantly, and hopefully makes the upkeep a bit easier in the future. Aside from the new LSM_STARTED_ALL notification, these changes also ensure that individual LSM initcalls are only called when the LSM is enabled at boot time. There should be a minor reduction in boot times for those who build multiple LSMs into their kernels, but only enable a subset at boot. It is worth mentioning that nothing at present makes use of the LSM_STARTED_ALL notification, but there is work in progress which is dependent upon LSM_STARTED_ALL. - Make better use of the seq_put*() helpers in device_cgroup* tag 'lsm-pr-20251201' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsm: (36 commits) lsm: use unrcu_pointer() for current->cred in security_init() device_cgroup: Refactor devcgroup_seq_show to use seq_put* helpers lsm: add a LSM_STARTED_ALL notification event lsm: consolidate all of the LSM framework initcalls selinux: move initcalls to the LSM framework ima,evm: move initcalls to the LSM framework lockdown: move initcalls to the LSM framework apparmor: move initcalls to the LSM framework safesetid: move initcalls to the LSM framework tomoyo: move initcalls to the LSM framework smack: move initcalls to the LSM framework ipe: move initcalls to the LSM framework loadpin: move initcalls to the LSM framework lsm: introduce an initcall mechanism into the LSM framework lsm: group lsm_order_parse() with the other lsm_order_*() functions lsm: output available LSMs when debugging lsm: cleanup the debug and console output in lsm_init.c lsm: add/tweak function header comment blocks in lsm_init.c lsm: fold lsm_init_ordered() into security_init() lsm: cleanup initialize_lsm() and rename to lsm_init_single() ... List of files: /linux/security/lsm.h

4ab5efcc2829a38a3adcfdd9cd0c0e0eb6fb6939 - lsm: consolidate all of the LSM framework initcalls

Tue, 18 Feb 2025 22:25:20 +0000

lsm: consolidate all of the LSM framework initcallsThe LSM framework itself registers a small number of initcalls, thispatch converts these initcalls into the new initcall mechanism.Reviewed-by: Casey Schaufler Reviewed-by: John Johansen Signed-off-by: Paul Moore List of files: /linux/security/lsm.h

5137e583ba2635b82667dc63cb35305750420411 - lsm: cleanup the debug and console output in lsm_init.c

Wed, 12 Feb 2025 23:20:01 +0000

lsm: cleanup the debug and console output in lsm_init.cMove away from an init specific init_debug() macro to a more generallsm_pr()/lsm_pr_cont()/lsm_pr_dbg() set of macros that are availableboth before and after init. In the process we do a number of minorchanges to improve the LSM initialization output and cleanup the codesomewhat.Reviewed-by: Casey Schaufler Reviewed-by: John Johansen Signed-off-by: Paul Moore List of files: /linux/security/lsm.h

250898ca335f337bc032a9693dc0a30a1cb85825 - lsm: rework lsm_active_cnt and lsm_idlist[]

Wed, 12 Feb 2025 20:36:51 +0000

lsm: rework lsm_active_cnt and lsm_idlist[]Move the LSM active count and lsm_id list declarations out of a headerthat is visible across the kernel and into a header that is limited tothe LSM framework. This not only helps keep the include/linux headerssmaller and cleaner, it helps prevent misuse of these variables.Reviewed-by: Casey Schaufler Reviewed-by: John Johansen Reviewed-by: Mimi Zohar Signed-off-by: Paul Moore List of files: /linux/security/lsm.h

67a4b6a89b99aff0883114e4ecba4b11aedc29a5 - lsm: split the init code out into lsm_init.c

Thu, 06 Feb 2025 21:44:10 +0000

lsm: split the init code out into lsm_init.cContinue to pull code out of security/security.c to help improvereadability by pulling all of the LSM framework initializationcode out into a new file.No code changes.Reviewed-by: Kees Cook Reviewed-by: John Johansen Reviewed-by: Casey Schaufler Reviewed-by: Mimi Zohar Signed-off-by: Paul Moore List of files: /linux/security/lsm.h