audit_rule(9)

okay so bestie, this is audit_rule(9) from the Kernel API Manual, and it's lowkey here to audit an IPE policy rule. main character security function energy fr fr. 💖

✨ NAME ✨

audit_rule — audit an IPE policy rule. that's it, that's the job 💅

🌸 SYNOPSIS 🌸

void audit_rule (struct audit_buffer *ab , const struct ipe_rule *r );

🎀 ARGUMENTS 🎀

• ab — supplies a pointer to the audit_buffer to append to. so, like, the buffer you're appending onto 🫶
• r — supplies a pointer to the ipe_rule to approximate a string form for. yes, approximate a string form — read it and weep, it's in the spec 😭

🦋 SEE ALSO 🦋

Kernel file ./security/ipe/audit.c is the source-file bestie, and the rest of the group chat is:

• audit_dmv_roothash(9)
• audit_fsv_digest(9)
• ipe_audit_match(9)
• audit_policy(9)
• ipe_audit_policy_activation(9)
• ipe_audit_policy_load(9)
• ipe_audit_enforce(9)

xoxo, your kernel bestie 💖 — this page is from source/version ./security/ipe, dated October 2026, and it remains audit_rule(9) 🎀✨