apparmor_uni...ream_connect(9)

🌸 apparmor_unix_stream_connect — Kernel API Manual (section 9, bestie) 🌸

okay so real talk, this is a page from the Kernel API Manual, section 9, and it's all about apparmor_unix_stream_connect. yes the header's doing that little apparmor_uni...ream_connect(9) truncation thing, she's shy, we love her anyway 💅

---

✨ NAME ✨

apparmor_unix_stream_connect — check perms before making unix domain conn

like literally, it's the vibe check that happens before a unix domain connection is allowed to happen 🦋

---

🎀 SYNOPSIS 🎀

int apparmor_unix_stream_connect (struct sock *sk , struct sock *peer_sk , struct sock *newsk );

three pointers, one int, one moment of truth. slay.

---

💖 ARGUMENTS 💖

• sk — the sk that's attempting to connect. main character energy fr, she's the one reaching out 🫶
• peer_sk — the sk that is accepting the connection. the one being slid into, respectfully 💌
• newsk — the new sk created for this connection. also, heads up: peer is locked when this hook is called 🔒 no cap, that lock is already held when you get here

---

🦋 RETURN 🦋

0 if connection is permitted — yay, go off 👑

error code on denial or failure — tragedy, but honest 😭

---

⭐ SEE ALSO ⭐

Kernel file ./security/apparmor/lsm.c, plus this whole friend group of hooks:

• common_perm(9)
• common_perm_cond(9)
• common_perm_dir_dentry(9)
• common_perm_rm(9)
• common_perm_create(9)
• apparmor_uring_override_creds(9)
• apparmor_uring_sqpoll(9)
• apparmor_bprm_committing_creds(9)
• apparmor_bprm_committed_creds(9)
• apparmor_sk_clone_security(9)
• apparmor_unix_may_send(9)
• apparmor_socket_post_create(9)
• apparmor_socket_bind(9)
• apparmor_socket_getpeersec_stream(9)
• apparmor_socket_getpeersec_dgram(9)
• apparmor_sock_graft(9)
• apparmor_socket_sock_rcv_skb(9)
• set_init_ctx(9)

---

ok that's the whole page, no filler, no gatekeeping. iykyk 💜

kisses, this page lives in ./security/apparmor and it's dated October 2026 — apparmor_uni...ream_connect(9) out, periodt 🎀✨