bpf_binprm_select_interp(9)

💖 bpf_binprm_select_interp(9) 💖

hii bestie, welcome to the kernel API manual ✨ this one is short but lowkey iconic, and it's literally about running an exec under an interpreter the entry bound 🫶

---

🌸 NAME 🌸

bpf_binprm_select_interp — run this exec under an interpreter the entry bound 💅

---

✨ SYNOPSIS ✨

__bpf_kfunc int bpf_binprm_select_interp (struct linux_binprm *bprm , const char *name , size_t name__sz );

---

🎀 ARGUMENTS 🎀

• bprm — the binary that is being executed 👀
• name — the name the interpreter was registered under 🏷️
• name__sz — size of the name buffer, including the terminating NUL 🧚

---

🦋 DESCRIPTION 🦋

okay so this is meant to be called from the load program of a struct binfmt_misc_ops handler instead of bpf_binprm_set_interp ⭐ it selects one of the interpreters the matched entry was registered with, and each of those was opened once when the entry was registered 🔥

nothing is resolved at exec time, so no filesystem view can redirect the interpreter — no cap, that's the whole point 💀

the interpreter runs under the path the entry registered it under 🛣️ and calling it again replaces the selection 👑 periodt.

---

🔥 RETURN 🔥

• 0 on success 🎉
• -ENOENT if the matched entry bound no interpreter of that name 😭
• a negative errno on failure 💔

---

👑 SEE ALSO 👑

kernel file ./fs/binfmt_misc_bpf.c and the whole squad: binfmt_misc_get_ops(9), bpf_binprm_set_interp(9), bpf_binprm_set_interp_arg(9), bpf_binprm_set_flags(9) 🌈

---

xoxo 💋 from ./fs, October 2026 — bpf_binprm_select_interp(9) 🫶✨