aa_task_setrlimit(9)

✨ aa_task_setrlimit(9) ✨

okay bestie so this one is from the Kernel API Manual (section 9, kernel-functions vibes) and it's literally the AppArmor girlie whose whole job is checking whether a task is allowed to set an rlimit 💅

---

🌸 NAME 🌸

aa_task_setrlimit — test permission to set an rlimit

like, it's the vibe check before the limit gets set, iykyk 🎀

---

🦋 SYNOPSIS 🦋

int aa_task_setrlimit (const struct cred *subj_cred , struct aa_label
*label , struct task_struct *task , unsigned int resource , struct
rlimit *new_rlim );

that's the whole signature, no cap — copy it exactly, don't be out here renaming things 🙈

---

💖 ARGUMENTS 💖

so there's five of them and each one is doing its own little main character thing:

• subj_cred — the cred that's setting the limit, aka who's doing it 👑
• label — the label confining the task. it's (NOT NULL) so like… do not pass null, fr fr
• task — the task the resource is being set on, the actual target
• resource — the resource being set, which one we're talking about
• new_rlim — the new resource limit. also (NOT NULL) bestie, don't test me 😭

---

🌈 DESCRIPTION 🌈

control raising the process's hard limit ✨

that's the whole bit — it's the gatekeeper for bumping that hard limit up. very "you shall not pass" but make it kernel 🫶

---

⭐ RETURN ⭐

0 — slayed, all good 💅

or an error code if setting the resource failed 😭 (so like, check it, don't just assume)

---

🔥 SEE ALSO 🔥

• kernel file ./security/apparmor/resource.c
• audit_resource(9)
• aa_map_resource(9)
• __aa_transition_rlimits(9)

go read those if you want the full lore 🧚

---

ngl this is AppArmor territory — ./security/apparmor — so if you're poking around in there, you're in the right neighborhood 🏡

---

and that's the page bestie!! 💜 source is ./security/apparmor, dated October 2026 — iconic, obsessed, periodt 🍓✨