__security_genfs_sid(9)
okay so we're in the Kernel API Manual, and this page is all about __security_genfs_sid(9) β yes, the tiny helper with main character energy π
β¨
πΈ NAME πΈ
__security_genfs_sid β the helper that obtains a SID for a file in a filesystem. That's the whole name vibe, periodt π
β¨ SYNOPSIS β¨
int __security_genfs_sid (struct selinux_policy *policy , const char
*fstype , const char *path , u16 orig_sclass , u32 *sid );
π¦ ARGUMENTS π¦
policyβ policy. That's literally it, bestie β no extra lore here π«Άfstypeβ filesystem typepathβ path from root of mountorig_sclassβ file security classsidβ SID for path
π DESCRIPTION π
okay so what does this actually do? It obtains a SID to use for a file in a filesystem that cannot support xattr or use a fixed labeling behavior like transition SIDs or task SIDs. That's the tea π
β οΈ WARNING: this function may return -ESTALE, indicating that the caller must retry the operation after re-acquiring the policy pointer! Do not ignore this, bestie β it's literally a warning for a reason ππ
π SEE ALSO π
Kernel file: ./security/selinux/ss/services.c β yes, that's the spot. Then the whole linked squad, every single one, no cap:
security_compute_av(9)security_sid_to_context(9)security_sid_to_context_inval(9)security_context_to_sid(9)security_context_to_sid_default(9)security_transition_sid(9)security_member_sid(9)security_change_sid(9)services_convert_context(9)security_load_policy(9)ocontext_to_sid(9)security_port_sid(9)security_ib_pkey_sid(9)security_ib_endport_sid(9)security_netif_sid(9)security_node_sid(9)security_genfs_sid(9)security_fs_use(9)security_net_peersid_resolve(9)security_policycap_supported(9)security_netlbl_cache_add(9)security_netlbl_secattr_to_sid(9)security_netlbl_sid_to_secattr(9)__security_read_policy(9)security_read_policy(9)security_read_state_kernel(9)
okay that's the page, bestie π«Άπ. Source/version: ./security/selinux/ss; date: October 2026; title: __security_genfs_sid(9). Now go retry after re-acquiring that policy pointer, mwah π
β¨
π¦ where this page comes from
- nixpkgs unstable: linux-manual 7.3.1
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms