__label_replace(9)

💅 __label_replace(9) — like, the Kernel API Manual page you actually wanna read

okay bestie, so this is a page from the Kernel API Manual, and it's literally about swapping one label for another inside a label set. that's the whole vibe. 🎀

---

✨ NAME ✨

__label_replace — replace @old with @new in label set

like... the name is literally the plot. no notes. 👑

---

🦋 SYNOPSIS 🦋

bool __label_replace (struct aa_label *old , struct aa_label *new );

it returns a bool, it takes two struct aa_label * args, and the spacing in there is exactly what the manpage says, so don't come for me about it fr fr 💅

---

🌸 ARGUMENTS 🌸

• old — the label you're yeeting out of the label set. bye bestie 👋
• new — the label that's taking old's spot, like a glow-up replacement. slay ✨

---

🔥 DESCRIPTION 🔥

okay so here's the requirement, and it's giving strict: you need labels_set(old)->lock write_lock valid, and a ref count must be held on new.

read that again. write lock on the labels_set of old, and a valid ref count held on new. that's the entry fee, no exceptions 🫶

---

⭐ RETURN ⭐

returns true if old was actually in the set and got replaced by new.

if it wasn't in the set? then it's not true. simple as that 💀

---

🧚 NOTE 🧚

heads up bestie — the current implementation requires the label set be ordered in such a way that new directly replaces old's position in the set. like, the position has to line up.

and specifically: ie. using pointer comparison of the label address would not work. so don't try that. it's not gonna eat, it's gonna flop 🙈

---

🍓 SEE ALSO 🍓

the whole friend group, in the order the manpage gives them, and yes i'm listing every single one because i'm not about to do you dirty like that 💜

• Kernel file ./security/apparmor/label.c
• ns_cmp(9)
• profile_cmp(9)
• vec_cmp(9)
• aa_vec_unique(9)
• aa_label_alloc(9)
• label_cmp(9)
• __aa_label_next_not_in_set(9)
• aa_label_is_subset(9)
• aa_label_is_unconfined_subset(9)
• __label_remove(9)
• __label_insert(9)
• __vec_find(9)
• __label_find(9)
• aa_label_remove(9)
• aa_label_replace(9)
• vec_find(9)
• aa_label_insert(9)
• aa_label_next_in_merge(9)
• label_merge_cmp(9)
• label_merge_insert(9)
• labelset_of_merge(9)
• __label_find_merge(9)
• aa_label_find_merge(9)
• aa_label_merge(9)
• label_compound_match(9)
• label_components_match(9)
• aa_label_match(9)
• aa_update_label_name(9)
• aa_profile_snxprint(9)
• aa_label_snxprint(9)
• aa_label_asxprint(9)
• aa_label_acntsxprint(9)
• aa_label_strn_parse(9)
• aa_labelset_destroy(9)
• __label_update(9)
• __labelset_update(9)
• __aa_labelset_update_subtree(9)

---

and that's the page!! 🎀 this whole thing lives under ./security/apparmor, and it's dated October 2026 in the <pink>Kernel API Manual</pink> — so yeah, future-dated and iconic. go replace some labels bestie, but hold that write lock first 😭💖🦋