aa_match_to_prot(9)

🦋 aa_match_to_prot(9) — Kernel API Manual 🦋

okay bestie, welcome to the Kernel API Manual page for aa_match_to_prot(9) — the function that matches the af, type, protocol triplet. it's giving socket-policy matchmaker and we're obsessed 💅

🎀 NAME 🎀

aa_match_to_prot — match the af, type, protocol triplet. periodt.

✨ SYNOPSIS ✨

       aa_state_t aa_match_to_prot (struct aa_policydb *policy , aa_state_t
       state , u32 request , u16 af , int type , int protocol , struct aa_perms
       **p , const char **info );

🌸 ARGUMENTS 🌸

• policy — the policy being matched 👑
• state — the state to start in 🫶
• request — the permissions being requested, ignored if p == NULL 🙈
• af — socket address family 🌐
• type — socket type 🧚
• protocol — socket protocol 📡
• p — output — pointer to permission associated with match 💖
• info — output — pointer to string describing failure 😭

🫶 RETURN 🫶

the state match stopped in. that's the whole vibe ⭐

💖 DESCRIPTION 💖

okay so here's the tea: if p is assigned a value, the returned state will be the corresponding state. it will not set p on failure, or if the match completes only if an early match occurs. no cap 💀

🌈 SEE ALSO 🌈

• Kernel file ./security/apparmor/net.c — that's the spot, iykyk 🔥

mwah 💋 — this gem comes from source path ./security/apparmor, dated October 2026, and it's the aa_match_to_prot(9) manual page. slay 🎀