aa_lookup_condperms(9)

✨ aa_lookup_condperms 💅

okay so bestie, welcome to the Kernel API Manual, section 9 — this is aa_lookup_condperms(9) and she's here to convert dfa compressed perms to internal perms. yes, that's the whole vibe. let's get into it 🐝

---

🌸 NAME 🌸

aa_lookup_condperms — convert dfa compressed perms to internal perms

like literally, that's the job. compressed perms in, internal perms out. slay 💅

---

🦋 SYNOPSIS 🦋

struct aa_perms * aa_lookup_condperms (kuid_t subj_uid , struct
aa_policydb *rules , aa_state_t state , struct path_cond *cond );

copy it exactly bestie, commas and all, i don't make the rules (well, the kernel does) 💜

---

🎀 ARGUMENTS 🎀

• subj_uid — the uid to use for the subject owner test. it's giving "who is this, even" energy 🫶
• rules — the aa_policydb to lookup perms for. NOT NULL — like, do not pass NULL, i'm serious 🙈
• state — the state in dfa. yes, that dfa. main character state ✨
• cond — the conditions to consider. NOT NULL again — same deal, no NULLs allowed 💀

---

🔥 DESCRIPTION 🔥

literally the entire description is:

TODO: convert from dfa + state to permission entry

that's it. that's the description. it's giving unfinished homework energy 😭 our girl has a TODO and she's being so honest about it. iconic, frankly. the plan is to convert from dfa + state to a permission entry — when the TODO gets done, iykyk 💀✨

---

👑 RETURN 👑

a pointer to a file permission set 💖 (a struct aa_perms *, if you're keeping track — which you are, because you're that girl)

---

🌈 SEE ALSO 🌈

• Kernel file ./security/apparmor/file.c
• file_audit_cb(9)
• aa_audit_file(9)
• aa_str_perms(9)
• aa_path_perm(9)
• xindex_is_subset(9)
• aa_path_link(9)
• aa_file_perm(9)

go read them. all of them. bestie homework 🎀📚

---

sign-off time 🫶 this whole thing lives in ./security/apparmor, it's dated October 2026, and yes it really is page aa_lookup_condperms(9) of the Kernel API Manual — no cap, that's the source, that's the version, that's the date, periodt 💅✨