apparmor_bpr...itting_creds(9)

🎀 NAME 🎀

hey bestie 💖 you've landed on apparmor_bpr...itting_creds(9) from the Kernel API Manual, section 9. yeah the title's truncated like that — that's just the header being dramatic 💅 the function it's actually about is apparmor_bprm_committing_creds.

and what's the vibe? literally one line: do task cleanup on committing new creds. that's it, that's the whole pitch ✨ short, iconic, no notes.

🦋 SYNOPSIS 🦋

void apparmor_bprm_committing_creds (const struct linux_binprm *bprm );

that's your whole call signature, copy it exactly, don't get creative with it 🫶

💜 ARGUMENTS 💜

• bprm — binprm for the exec (NOT NULL). yes the manpage literally spells it "binprm" in the description while the synopsis says bprm — we are NOT fixing it, we are respecting it 🙈 it's the const struct linux_binprm * you saw up in the synopsis.

ok real talk for a sec: the argument is marked NOT NULL, meaning you do not pass a null pointer here. that's not a cute little suggestion, that's the spec. don't test it 😭

🌈 SEE ALSO 🌈

all of this lives in the kernel file ./security/apparmor/lsm.c, and here's the full friend group — every single one, no leaving anyone out 🫶

• common_perm(9)
• common_perm_cond(9)
• common_perm_dir_dentry(9)
• common_perm_rm(9)
• common_perm_create(9)
• apparmor_uring_override_creds(9)
• apparmor_uring_sqpoll(9)
• apparmor_bprm_committed_creds(9)
• apparmor_sk_clone_security(9)
• apparmor_unix_stream_connect(9)
• apparmor_unix_may_send(9)
• apparmor_socket_post_create(9)
• apparmor_socket_bind(9)
• apparmor_socket_getpeersec_stream(9)
• apparmor_socket_getpeersec_dgram(9)
• apparmor_sock_graft(9)
• apparmor_socket_sock_rcv_skb(9)
• set_init_ctx(9)

the way that list just keeps going 😭 that's a whole friend group chat right there, go read them all, iykyk 💅

🌸 okay that's the page, bestie! this diva comes to you from ./security/apparmor, dated October 2026, and it's filed as apparmor_bpr...itting_creds(9). go be normal about kernel creds 💖✨🎀