apparmor_soc...sock_rcv_skb(9)

✨ apparmor_socket_sock_rcv_skb — the vibe check before the glow-up ✨

okay bestie, so this is a page from the Kernel API Manual, and the function it's hyping up is literally called apparmor_socket_sock_rcv_skb 💅 (the header abbreviates it as apparmor_soc...sock_rcv_skb(9) because apparently even the kernel needs a little nickname sometimes, we've all been there 🎀).

---

🌸 NAME 🌸

apparmor_socket_sock_rcv_skb — it checks perms before associating skb to sk. like, it does the permission vibe check first, no cap. 👑

---

🦋 SYNOPSIS 🦋

int apparmor_socket_sock_rcv_skb (struct sock *sk , struct sk_buff *skb );

that's the whole signature, copy it exactly bestie, don't be weird about it 💖

---

💜 ARGUMENTS 💜

• sk — the sk that you're associating skb with. it's giving "this is where we're gonna attach the thing" ✨
• skb — the skb to check for perms. this one has to pass the vibe check before anything happens 🔥

---

🫶 NOTE 🫶

⚠️ okay so real talk, this part is important: it can not sleep — and it may be called with locks held. so do not go doing sleepy things in here, absolutely not the moment for a nap 💀

also, quoting the page directly: don't want protocol specific in __skb_recv_datagram to deny an incoming connection socket_sock_rcv_skb 🙈 — that's the whole point of this function existing, iykyk.

---

🌈 SEE ALSO 🌈

okay this is the friend group, and they're all icons honestly 🎀. the kernel file is ./security/apparmor/lsm.c and the whole squad is:

• common_perm(9)
• common_perm_cond(9)
• common_perm_dir_dentry(9)
• common_perm_rm(9)
• common_perm_create(9)
• apparmor_uring_override_creds(9)
• apparmor_uring_sqpoll(9)
• apparmor_bprm_committing_creds(9)
• apparmor_bprm_committed_creds(9)
• apparmor_sk_clone_security(9)
• apparmor_unix_stream_connect(9)
• apparmor_unix_may_send(9)
• apparmor_socket_post_create(9)
• apparmor_socket_bind(9)
• apparmor_socket_getpeersec_stream(9)
• apparmor_socket_getpeersec_dgram(9)
• apparmor_sock_graft(9)
• set_init_ctx(9)

literally the entire lineup, all listed, no skips, we don't do that here 💅✨

---

🧚 the cute sign-off 🧚

so that's the page! it comes to us from the source path ./security/apparmor, dated October 2026, and the footer repeats the title in its abbrev form apparmor_soc...sock_rcv_skb(9) — which, yeah, same energy as a group chat nickname that got cut off mid-word 😭 love that for us. bye bestie, go check those perms! 🍓💖🌺