avc_perm_nonode(9)

📦 version 7.3.1, in nixpkgs unstable

💅 avc_perm_nonode — a.k.a. the Kernel API Manual, section 9, bestie 🎀

okay so picture this: it's kernel time, it's SELinux time, and you need one (1) tiny little function that's like the backstage pass handler for the AVC. welcome to avc_perm_nonode(9) ✨ she's in the Kernel API Manual, section 9, and she is lowkey doing the most important "unlikely path" work you've never noticed. periodt. 👑

✨ NAME ✨

avc_perm_nonode — add an entry to the AVC 🫶

like... that's literally her whole job. adding an entry. to the AVC. iconic behavior fr fr.

🌈 SYNOPSIS 🌈

int avc_perm_nonode (u32 ssid , u32 tsid , u16 tclass , u32 requested ,
unsigned int flags , struct av_decision *avd );

look at that signature, bestie. six whole arguments. she's got range. 💅

🦋 ARGUMENTS 🦋

every single one of these matters, no skipping, we don't do that here 💖

  • ssid — the subject. like, who's asking? main character energy.
  • tsid — object/target. the thing being asked about. the love interest, if you will.
  • tclass — object class. what kind of thing is the target. the vibe check, basically.
  • requested — requested permissions. what the subject is trying to do. the ask. 🙈
  • flags — AVC flags. the little switches that change how she moves. ⭐
  • avd — access vector decision. the verdict gets dropped in here. like a little envelope with your fate inside 💌

🌸 DESCRIPTION 🌸

okay so real talk: this is the "we have no node" part of avc_has_perm_noaudit. iykyk.

and the way that this path is unlikely 😭 — like it does not happen often, it's the rare route — and it needs extra stack space for the new node that we generate. so that's why we don't inline it. NOT inlined. she stands on her own two feet. no cap. 🔥

the actual point: this function exists as a separate, non-inlined thing because it's the rare "no node" case and it has to grab extra stack space for the brand-new node it generates. that's the whole reason. slay. 💅

👑 SEE ALSO 👑

she does not exist in a vacuum, bestie, she's part of a whole ecosystem 🧚 and the kernel file she lives in is:

./security/selinux/avc.c

and here's the whole friend group, don't leave anyone out 💜:

🎀 the cute little sign-off 🎀

this absolute gem comes to you straight out of ./security/selinux, dated October 2026 — so yeah, she's fresh, she's current, she's got the whole kernel API manual behind her. go forth and add your entries, bestie. you're gonna ate. 🌟💖

📦 where this page comes from