__netlink_ns_capable(9)

🌸 NAME 🌸

okay so bestie, welcome to the Kernel API Manual 💖 this page is __netlink_ns_capable(9) — General netlink message capability test. no cap, that’s literally the whole name vibe. ✨

🦋 SYNOPSIS 🦋

bool __netlink_ns_capable (const struct netlink_skb_parms *nsp , struct
       user_namespace *user_ns , int cap );

🎀 ARGUMENTS 🎀

• nsp — the NETLINK_CB of the socket buffer holding a netlink command from userspace. 💌
• user_ns — the user namespace of the capability to use. 🌈
• cap — the capability to use. 🔥

💅 DESCRIPTION 💅

okay so the actual test is a permission vibe check: it tests whether the opener of the socket we received the message from had it when the netlink socket was created, and whether the sender of the message has the capability cap in the user namespace user_ns. that’s the whole bit. 👑

🌟 SEE ALSO 🌟

go be nosy in the kernel file ./net/netlink/af_netlink.c and check out these besties:

• netlink_ns_capable(9)
• netlink_capable(9)
• netlink_net_capable(9)
• netlink_set_err(9)
• netlink_change_ngroups(9)
• nlmsg_notify(9)

💖 cute sign-off time: source/version is ./net/netlink, date is October 2026, and it’s the __netlink_ns_capable(9) page. bye bestie, mwah 💋