aa_path_perm(9)

💖 NAME — aa_path_perm(9) in the Kernel API Manual 💖

okay so bestie, aa_path_perm is literally the do permissions check & audit function for @path. That's the whole vibe: aa_path_perm — do permissions check & audit for @path. Periodt. ✨

🎀 SYNOPSIS 🎀

       int aa_path_perm (const char *op , const struct cred *subj_cred , struct
       aa_label *label , const struct path *path , int flags , u32 request ,
       struct path_cond *cond );

💅 ARGUMENTS 💅

• op — the operation being checked, bestie. 👀
• subj_cred — the subject cred. 🫶
• label — the profile being enforced (NOT NULL) — no cap, it has to be there. 👑
• path — path to check permissions of (NOT NULL). 🛣️
• flags — any additional path flags beyond what the profile specifies. 🚩
• request — requested permissions. 🔐
• cond — conditional info for this request (NOT NULL). 🧚

🌸 RETURN 🌸

Returns 0, else error if access denied or other error. That's it. 💀

🦋 SEE ALSO 🦋

Kernel file ./security/apparmor/file.c: file_audit_cb(9), aa_audit_file(9), aa_lookup_condperms(9), aa_str_perms(9), xindex_is_subset(9), aa_path_link(9), aa_file_perm(9). Go read these if you're nosy — iykyk. 💜

💌 cute sign-off: this lil page comes from source/version ./security/apparmor, dated October 2026, and it's aa_path_perm(9) — periodt, bestie. 🫶✨