avc_compute_av(9)

✨ NAME ✨

okay bestie, we're on avc_compute_av(9) from the Kernel API Manual 💖 and this page is literally:

• avc_compute_av — Add an entry to the AVC based on the security policy

---

🌸 SYNOPSIS 🌸

void avc_compute_av (u32 ssid , u32 tsid , u16 tclass , struct av_decision *avd , struct avc_xperms_node *xp_node );

---

🎀 ARGUMENTS 🎀

• ssid — subject
• tsid — object/target
• tclass — object class
• avd — access vector decision
• xp_node — AVC extended permissions node

---

🦋 DESCRIPTION 🦋

okay so this is the slow-path helper function for avc_has_perm_noaudit, specifically for when the avc_node lookup fails. no cap, that's the whole vibe check.

and bestie, the page is like very serious about this part:

Don't inline this, since it's the slow-path and just results in a bigger stack frame. 💀

like… do not do it. it's giving "please respect the stack frame," fr fr.

---

🌈 SEE ALSO 🌈

the kernel file ./security/selinux/avc.c is the main character here, and the related pages are all:

• avc_init(9)
• avc_lookup(9)
• avc_insert(9)
• avc_audit_pre_callback(9)
• avc_audit_post_callback(9)
• avc_add_callback(9)
• avc_update_node(9)
• avc_flush(9)
• avc_ss_reset(9)
• avc_perm_nonode(9)
• avc_has_perm_noaudit(9)
• avc_has_perm(9)

---

source/version: ./security/selinux · date: October 2026 · page: avc_compute_av(9) — ok bye bestie, slay responsibly 💅✨🫶