__labelset_update(9)

🦋 __labelset_update(9) 🦋

okay bestie, welcome to the Kernel API Manual 💖 this page is literally all about __labelset_update, and it’s giving “small function, very serious lock rules” energy. no cap. 💅

---

✨ NAME ✨

__labelset_update — update labels in @ns 🎀

---

🌸 SYNOPSIS 🌸

void __labelset_update (struct aa_ns *ns );

---

💖 ARGUMENTS 💖

• ns — namespace to update labels in (NOT NULL) 🫶

---

🔥 DESCRIPTION 🔥

⚠️ Requires: ns lock be held. like, actually held. this is not a drill, bestie. 😭

It walks the labelset and makes sure all labels are up to date and valid. Any label that has a stale component gets marked stale and replaced by an updated version. ✨

If failures happen because of memory pressures, then the stale labels will be left in place until the next pass. 🫶 that’s the documented behavior — they wait for the next pass. 💀

---

🌈 SEE ALSO 🌈

Kernel file ./security/apparmor/label.c — and the whole squad is: ns_cmp(9), profile_cmp(9), vec_cmp(9), aa_vec_unique(9), aa_label_alloc(9), label_cmp(9), __aa_label_next_not_in_set(9), aa_label_is_subset(9), aa_label_is_unconfined_subset(9), __label_remove(9), __label_replace(9), __label_insert(9), __vec_find(9), __label_find(9), aa_label_remove(9), aa_label_replace(9), vec_find(9), aa_label_insert(9), aa_label_next_in_merge(9), label_merge_cmp(9), label_merge_insert(9), labelset_of_merge(9), __label_find_merge(9), aa_label_find_merge(9), aa_label_merge(9), label_compound_match(9), label_components_match(9), aa_label_match(9), aa_update_label_name(9), aa_profile_snxprint(9), aa_label_snxprint(9), aa_label_asxprint(9), aa_label_acntsxprint(9), aa_label_strn_parse(9), aa_labelset_destroy(9), __label_update(9), __aa_labelset_update_subtree(9) 💜

---

mwah 💋 this cutie came from the source/version spot ./security/apparmor, dated October 2026, and it’s the __labelset_update(9) page. bye bestie — go hold that ns lock fr fr 🫶💖