aa_label_is...fined_subset(9)

🌸 NAME 🌸

okay so welcome to the Kernel API Manual page for aa_label_is_unconfined_subset(9) — yes, the header got chopped into aa_label_is...fined_subset(9), but bestie the real function is aa_label_is_unconfined_subset, and it tests if @sub is a subset of @set. Periodt. 💅

✨ SYNOPSIS ✨

       bool aa_label_is_unconfined_subset (const struct aa_label *set , const
       struct aa_label *sub );

🫶 ARGUMENTS 🫶

• set — label to test against. This is the one doing the vibe check.
• sub — label to test if is subset of set. This is the one getting checked, no cap.

🔥 DESCRIPTION 🔥

This checks for subset but taking into account unconfined. The way it works is lowkey iconic: if sub contains an unconfined profile that does not have a matching unconfined in set, that will not cause the test to fail. Conversely, we don't care about an unconfined in set that is not in sub. It's giving "unconfined exemption energy," fr fr. 💖

👑 RETURN 👑

true if sub is special_subset of set, else false. That's the whole mood. ⭐

🌈 SEE ALSO 🌈

Kernel file ./security/apparmor/label.c is where this cutie lives, and the whole SEE ALSO squad is: ns_cmp(9), profile_cmp(9), vec_cmp(9), aa_vec_unique(9), aa_label_alloc(9), label_cmp(9), __aa_label_next_not_in_set(9), aa_label_is_subset(9), __label_remove(9), __label_replace(9), __label_insert(9), __vec_find(9), __label_find(9), aa_label_remove(9), aa_label_replace(9), vec_find(9), aa_label_insert(9), aa_label_next_in_merge(9), label_merge_cmp(9), label_merge_insert(9), labelset_of_merge(9), __label_find_merge(9), aa_label_find_merge(9), aa_label_merge(9), label_compound_match(9), label_components_match(9), aa_label_match(9), aa_update_label_name(9), aa_profile_snxprint(9), aa_label_snxprint(9), aa_label_asxprint(9), aa_label_acntsxprint(9), aa_label_strn_parse(9), aa_labelset_destroy(9), __label_update(9), __labelset_update(9), __aa_labelset_update_subtree(9). iykyk 🦋

signed off from ./security/apparmor, dated October 2026, for the aa_label_is...fined_subset(9) page. byeee bestie 💜🎀