audit_resource(9)

📦 version 7.3.1, in nixpkgs unstable

✨ NAME ✨

okay so bestie, welcome to audit_resource(9) from the Kernel API Manual — the whole vibe is audit_resource: audit setting resource limit. No cap, it's literally about auditing the setting of a resource limit. 💅

🔥 SYNOPSIS 🔥

here's the exact signature, character-for-character, don't @ me:

       int audit_resource (const struct cred *subj_cred , struct aa_profile
       *profile , unsigned int resource , unsigned long value , struct aa_label
       *peer , const char *info , int error );

🎀 ARGUMENTS 🎀

  • subj_cred — the cred that's setting the resource. 🫶
  • profile — the profile being enforced (NOT NULL, bestie — do not come in here with a null profile 😭).
  • resource — the rlimit being audited. 👀
  • value — the value being set. ✨
  • peer — the aa_albel of the task being set. 🦋
  • info — the info being audited. 🌸
  • error — the error value. 💀

💖 RETURN 💖

It gives you 0 or ad->error, else a different error code on failure. periodt. 👑

👀 SEE ALSO 👀

the kernel file is literally ./security/apparmor/resource.c, and these are the cross-refs you can go snoop:

okay bye bestie — this iconic page came from ./security/apparmor, dated October 2026, and it's still audit_resource(9) at heart. 💖✨🎀

📦 where this page comes from