__audit_mq_open(9)

💖 __audit_mq_open(9) 💖

okay so we're in the Kernel API Manual, bestie, and today's main character is __audit_mq_open — the function that records audit data for a POSIX MQ open. no cap, that's the whole assignment. 🫶

🌸 NAME 🌸

__audit_mq_open — record audit data for a POSIX MQ open. she's giving very specific kernel-worker energy, and honestly? iconic. 💅

✨ SYNOPSIS ✨

void __audit_mq_open (int oflag , umode_t mode , struct mq_attr *attr );

🎀 ARGUMENTS 🎀

• oflag — the open flag. it's the int that says how the open is happening, bestie. 🔥
• mode — the mode bits. yes, those bits. umode_t says hi. ✨
• attr — the queue attributes, passed as struct mq_attr *attr. it's giving "here are the MQ vibes" and we love that for her. 🦋

also: the function returns void, so there's no return value to catch. periodt. 💀

🌈 SEE ALSO 🌈

Kernel file ./kernel/auditsc.c — plus these sibling pages, all (9) and all lowkey part of the same kernel-audit friend group, iykyk:

• __audit_filter_op(9)
• audit_filter_uring(9)
• audit_reset_context(9)
• audit_alloc(9)
• audit_log_uring(9)
• __audit_free(9)
• audit_return_fixup(9)
• __audit_uring_entry(9)
• __audit_uring_exit(9)
• __audit_syscall_entry(9)
• __audit_syscall_exit(9)
• __audit_getname(9)
• __audit_inode(9)
• __audit_inode_child(9)
• auditsc_get_stamp(9)
• __audit_mq_sendrecv(9)
• __audit_mq_notify(9)
• __audit_mq_getsetattr(9)
• __audit_ipc_obj(9)
• __audit_ipc_set_perm(9)
• __audit_socketcall(9)
• __audit_fd_pair(9)
• __audit_sockaddr(9)
• audit_signal_info_syscall(9)
• __audit_log_bprm_fcaps(9)
• __audit_log_capset(9)
• audit_core_dumps(9)
• audit_seccomp(9)

okay that's the page, bestie! it came from the ./kernel source, dated October 2026, and its title is __audit_mq_open(9). mwah, go slay your audit vibes 💋✨