__audit_mq_getsetattr(9)

👑 __audit_mq_getsetattr — no cap, this is the Kernel API Manual moment

okay so bestie, welcome to the glow-up era of kernel auditing 💅 this little function is the one that records audit data for a POSIX MQ get/set attribute. that's the whole vibe. it's giving "quiet main character who does one job flawlessly" ✨

✨ SYNOPSIS ✨

void __audit_mq_getsetattr (mqd_t mqdes , struct mq_attr *mqstat );

literally that's it. two args, void return, no drama 🎀 (and yes, the spacing is exactly like that — we don't fix what isn't broken, periodt).

🌸 ARGUMENTS 🌸

• mqdes — the MQ descriptor, aka the little handle that says "this queue right here" 🦋
• mqstat — the MQ flags, the whole struct mq_attr * situation, she's pointing at the attribute goods 💖

💫 SEE ALSO 💫

so there's a whole friend group here and honestly? iconic. not me listing every single one because every single one matters 🫶 also hi, they live in the kernel file ./kernel/auditsc.c:

• __audit_filter_op(9)
• audit_filter_uring(9)
• audit_reset_context(9)
• audit_alloc(9)
• audit_log_uring(9)
• __audit_free(9)
• audit_return_fixup(9)
• __audit_uring_entry(9)
• __audit_uring_exit(9)
• __audit_syscall_entry(9)
• __audit_syscall_exit(9)
• __audit_getname(9)
• __audit_inode(9)
• __audit_inode_child(9)
• auditsc_get_stamp(9)
• __audit_mq_open(9)
• __audit_mq_sendrecv(9)
• __audit_mq_notify(9)
• __audit_ipc_obj(9)
• __audit_ipc_set_perm(9)
• __audit_socketcall(9)
• __audit_fd_pair(9)
• __audit_sockaddr(9)
• audit_signal_info_syscall(9)
• __audit_log_bprm_fcaps(9)
• __audit_log_capset(9)
• audit_core_dumps(9)
• audit_seccomp(9)

lowkey a whole squad. go say hi to all of them fr fr 🌈

ngl bestie, this page is short and sweet — but read the SEE ALSO list anyway, because knowing the whole audit family is how you become the main character of your own kernel 🔥

and that's the tea 🍓 this lil gem comes from ./kernel, dated October 2026 — so mark your calendars, screenshot it, send it to the group chat 💜 mwah, go audit something cute ✨🧚