__audit_uring_entry(9)

📦 version 7.3.1, in nixpkgs unstable

💜 __audit_uring_entry — a Kernel API Manual moment

okay so bestie, welcome to the Kernel API Manual page for __audit_uring_entry(9), and honestly? this one is short and sweet and you're gonna eat it up ✨

🌸 NAME 🌸

__audit_uring_entry — the little function that gets your kernel task's audit context all prepped and cute for io_uring 🦋

🎀 SYNOPSIS 🎀

void __audit_uring_entry (u8 op );

periodt. that's the whole signature. no return value, one arg, very demure 💅

⭐ ARGUMENTS ⭐

  • op — the io_uring opcode 🫶 like, the whole personality of the operation you're auditing, passed in as a u8.

✨ DESCRIPTION ✨

So here's the vibe: this is basically audit_syscall_entry's cousin, but it's built specifically for io_uring operations instead of plain old syscalls. same energy, different lane 💖

And listen — this is the important part, so don't skip it 🙈 — this function should only ever be called from audit_uring_entry, because it fully relies on the audit context checking that's already happening inside that function. so like, no calling it from wherever you feel like it, okay? that's the rule, no cap 🔥

👑 SEE ALSO 👑

all the sibling functions, in the order the page gives them, from the Kernel file ./kernel/auditsc.c:

💀 real talk though: calling this outside of audit_uring_entry is not it. the context checking you're depending on lives in there, so stay in your lane, bestie 🌈

that's the whole page, and it's giving concise and iconic ngl 🧚

kisses and bye-bye from ./kernel, dated October 2026, brought to you by __audit_uring_entry(9) — slay 💅💖

📦 where this page comes from