aa_label_match(9)

📦 version 7.3.1, in nixpkgs unstable

💅 aa_label_match(9) 💅

okay bestie, so this is a page out of the Kernel API Manual (yes, the kernel kernel, we're being ✨serious✨ today) and it's all about aa_label_match — literally the function that does a multi-component label match. AppArmor internals, we love to see it 🎀

🌸 NAME 🌸

aa_label_match — do a multi-component label match 🦋

✨ SYNOPSIS ✨

int aa_label_match (const struct aa_profile *profile , struct aa_ruleset
*rules , struct aa_label *label , aa_state_t state , bool inview , u32
request , struct aa_perms *perms );

👑 ARGUMENTS 👑

okay so here's the whole cast, main-character energy only 💜

  • profile — the profile you're matching against. NOT NULL, bestie, don't even try it 🙈
  • rules — the ruleset to search. that's the vibe check zone 🔍
  • label — the label to match. also NOT NULL. we said what we said 💅
  • state — the state to start in. where we begin the journey 🧚
  • inview — whether to match labels in view or only in scope. it's giving "are we looking at the whole picture or just our lane" 🌈
  • request — the permission request. u32, she's numeric, she's important 🔥
  • perms — returns the computed perms. NOT NULL again — this one's an output, so pls actually give her somewhere to live 🍓

⭐ RETURN ⭐

it returns the state the match finished in 🫶 and heads up — that may literally be the none matching state. so like, no match, no drama, that's still a valid answer, ngl 💀

💖 SEE ALSO 💖

okay this is the whole group chat of related symbols, all from the kernel file ./security/apparmor/label.c — and yes, we're listing every single one, no cap, nobody gets left on read 😭

also like, the source lives at ./security/apparmor — that's the whole directory, go explore, iykyk 🧚‍♀️

aaaand that's the page, bestie!! 🎀 sign-off time: this iconic little doc came out of ./security/apparmor and it's dated October 2026 — so like, she's fresh, she's future, she's that girl 💅✨ bye ily 🫶💖

📦 where this page comes from