capable_wrt_inode_uidgid(9)

💅 capable_wrt_inode_uidgid(9) 💅

okay so bestie, we're in the Kernel API Manual today and the main character of this page is capable_wrt_inode_uidgid(9). she's a little permission-checking icon and honestly she ate. let's get into it ✨

---

🌸 NAME 🌸

capable_wrt_inode_uidgid — the one that checks nsown_capable and whether the uid and gid are mapped 🫶

---

✨ SYNOPSIS ✨

bool capable_wrt_inode_uidgid (struct mnt_idmap *idmap , const struct
       inode *inode , int cap );

like, she takes three things and gives you back a bool. simple. elegant. no cap 💖

---

🎀 ARGUMENTS 🎀

• idmap — the idmap of the mount that the inode was found from 🗺️
• inode — the inode in question, the actual subject of the vibe check 👀
• cap — the capability in question, aka which power we're asking about 👑

---

🦋 DESCRIPTION 🦋

so here's the tea ☕ — she returns true if both of these things are true:

1. the current task has the given capability, targeted at its own user namespace 💫
2. the given inode's uid and gid are mapped into the current user namespace 🌈

both boxes ticked? true, slay. anything missing? no cap, you're getting a false. periodt 💅

---

💜 SEE ALSO 💜

• Kernel file ./kernel/capability.c
• sys_capget(9)
• sys_capset(9)
• has_ns_capability(9)
• has_ns_capability_noaudit(9)
• has_capability_noaudit(9)
• ns_capable(9)
• ns_capable_noaudit(9)
• ns_capable_setid(9)
• capable(9)
• capable_noaudit(9)
• file_ns_capable(9)
• privileged_wrt_inode_uidgid(9)
• ptracer_capable(9)

the whole capability friend group fr fr, go say hi to all of them 🧚‍♀️

---

aaaand that's the page! brought to you by the ./kernel girlies, dated October 2026 — catch you in the next manpage bestie, mwah 💋💖🎀