apparmor_socket_post_create(9)

✨ apparmor_socket_post_create(9) ✨

okay so bestie, welcome to the kernel API manual for apparmor_socket_post_create(9) — yes it's a whole function AND a whole page name, we contain multitudes 💅

🌸 NAME 🌸

apparmor_socket_post_create — literally just setup the per-socket security struct 🎀

🦋 SYNOPSIS 🦋

int apparmor_socket_post_create (struct socket *sock , int family , int
type , int protocol , int kern );

💖 ARGUMENTS 💖

• sock — the socket that is being setup, she's the main character here 👑
• family — the family of the socket being created, like her whole ancestry
• type — the type of the socket, iykyk
• protocol — the protocol of the socket, it's giving specifics
• kern — this flag means the socket is a special kernel socket, highkey important 🫶

💀 NOTE 💀

• kernel sockets labeled kernel_t used to use unconfined — that's the lore, fr fr
• the socket may not have sk here if it was created with sock_create_lite or sock_alloc 😭 those should be accept cases, and they'll be handled in sock_graft. so like… don't panic when sk is missing, it's not a bug, it's a vibe check you have to pass 🌈

ngl, that second one is the important one — no sk does not mean something broke, it means somebody used sock_create_lite or sock_alloc, and sock_graft is gonna pick it up later 🧚

🔥 SEE ALSO 🔥

if you're obsessed with this one (and why wouldn't you be), the kernel file is ./security/apparmor/lsm.c — go read it, it ate 💅

and here's the whole friend group, no cap:

• common_perm(9)
• common_perm_cond(9)
• common_perm_dir_dentry(9)
• common_perm_rm(9)
• common_perm_create(9)
• apparmor_uring_override_creds(9)
• apparmor_uring_sqpoll(9)
• apparmor_bprm_committing_creds(9)
• apparmor_bprm_committed_creds(9)
• apparmor_sk_clone_security(9)
• apparmor_unix_stream_connect(9)
• apparmor_unix_may_send(9)
• apparmor_socket_bind(9)
• apparmor_socket_getpeersec_stream(9)
• apparmor_socket_getpeersec_dgram(9)
• apparmor_sock_graft(9)
• apparmor_socket_sock_rcv_skb(9)
• set_init_ctx(9)

⭐ and that's the whole page!! this one lives in ./security/apparmor and it's dated October 2026 — so yeah, mark your calendars bestie, she's from the future 🦋💜