avc_insert(9)

✨ avc_insert(9) — the kernel API manual, bestie edition ✨

okay so real talk, this is avc_insert from the avc_insert(9) Kernel API Manual, and it's genuinely so important — it's the glow-up moment where an access decision finally gets to live in the cache. let's get into it 💅

---

🌸 NAME 🌸

avc_insert — insert an AVC entry. that's it, that's the whole vibe. it puts a thing in the cache, no cap. ✨

---

🦋 SYNOPSIS 🦋

void avc_insert (u32 ssid , u32 tsid , u16 tclass , struct av_decision
*avd , struct avc_xperms_node *xp_node );

bestie it returns void, so literally nothing comes back. it just does the thing and dips. main character energy fr fr 🎀

---

💖 ARGUMENTS 💖

• ssid — the source security identifier. who's doing the thing 👀
• tsid — the target security identifier. who's having the thing done to them 💀
• tclass — the target security class. the category the target belongs to, yk?
• avd — the resulting av decision. this is the ✨verdict✨ we're working with.
• xp_node — the resulting extended permissions. the extra little sprinkles on top 🌈

---

🔥 DESCRIPTION 🔥

so what this does is insert an AVC entry for the SID pair (ssid, tsid) and class tclass — like, it's literally registering this combo into the cache 🫶

the access vectors and the sequence number are normally provided by the security server in response to a security_compute_av call — that's the usual plug, iykyk 🧚

then here's the actual vibe check: if the sequence number avd->seqno is not less than the latest revocation notification, then (and only then!) the function copies the access vectors into a cache entry. slay. 🎀

no cap though — that condition is the whole gate. if the seqno is less than the latest revocation notification, nothing gets copied. it's giving ✨conditional✨ and honestly? iconic.

---

⭐ SEE ALSO ⭐

kernel file ./security/selinux/avc.c — and the whole friend group, honestly:

• avc_init(9)
• avc_lookup(9)
• avc_audit_pre_callback(9)
• avc_audit_post_callback(9)
• avc_add_callback(9)
• avc_update_node(9)
• avc_flush(9)
• avc_ss_reset(9)
• avc_compute_av(9)
• avc_perm_nonode(9)
• avc_has_perm_noaudit(9)
• avc_has_perm(9)

like the entire avc entourage, we love a supportive squad 💜

---

and that's the page!! brought to you by ./security/selinux, dated October 2026, signed off with a very cute avc_insert(9) — go forth and insert those entries, bestie 🌸🦋💅