apparmor_ur...erride_creds(9)
okay bestie, welcome to the apparmor_uring_override_creds(9) page from the Kernel API Manual π«Άπ
the header shortens the handle to apparmor_ur...erride_creds(9), but the full function name is living her best life in NAME, no cap.
π NAME π
apparmor_uring_override_creds β check the requested cred override β¨
πΈ SYNOPSIS πΈ
int apparmor_uring_override_creds (const struct cred *new );
π ARGUMENTS π
newβ the target creds π
π¦ DESCRIPTION π¦
okay so this is the vibe check: it checks to see if the current task is allowed to override its credentials to service an io_uring operation. it's giving permission gatekeeping, but make it kernel security π
β¨
π SEE ALSO π
Kernel file ./security/apparmor/lsm.c, plus the whole iconique (9) crew:
common_perm(9)common_perm_cond(9)common_perm_dir_dentry(9)common_perm_rm(9)common_perm_create(9)apparmor_uring_sqpoll(9)apparmor_bprm_committing_creds(9)apparmor_bprm_committed_creds(9)apparmor_sk_clone_security(9)apparmor_unix_stream_connect(9)apparmor_unix_may_send(9)apparmor_socket_post_create(9)apparmor_socket_bind(9)apparmor_socket_getpeersec_stream(9)apparmor_socket_getpeersec_dgram(9)apparmor_sock_graft(9)apparmor_socket_sock_rcv_skb(9)set_init_ctx(9)
sending love from ./security/apparmor β dated October 2026 β and yes, she's still apparmor_ur...erride_creds(9) in the footer πβ¨π«Ά
π¦ where this page comes from
- nixpkgs unstable: linux-manual 7.3.1
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms