check_security_flavor(9)

check_security_flavor(9) 💅

okay bestie, welcome to the Kernel API Manual entry for check_security_flavor(9) — it's giving “tiny access-control helper with main character energy,” and we're gonna read it together, fr fr.

✨ NAME ✨

check_security_flavor — check if access to export is allowed by the security flavor.

🛰️ SYNOPSIS 🛰️

__be32 check_security_flavor (struct svc_export *exp , struct svc_rqst
*rqstp , bool may_bypass_gss );

🎀 ARGUMENTS 🎀

• exp — the svc_export that is being accessed, aka the thing someone is trying to get into.
• rqstp — the svc_rqst that is attempting to access exp.
• may_bypass_gss — this one is here to reduce strictness of the authorization check. yes, that's literally its whole vibe.

💖 DESCRIPTION 💖

okay so this is a helper function for check_nfsd_access. and like, real talk: callers should be using check_nfsd_access instead of calling this function directly. the one exception is __fh_verify, since it has logic that may result in one or both of the helpers being skipped. that's the whole lore.

Return values: nfs_ok if access is granted, or nfserr_wrongsec if access is denied.

🦋 SEE ALSO 🦋

Kernel file ./fs/nfsd/export.c — then the whole squad:

• nfsd_nl_expkey_get_reqs_dumpit(9)
• nfsd_nl_parse_one_expkey(9)
• nfsd_nl_expkey_set_reqs_doit(9)
• nfsd_nl_svc_export_get_reqs_dumpit(9)
• nfsd_nl_parse_fslocations(9)
• nfsd_nl_parse_one_export(9)
• nfsd_nl_svc_export_set_reqs_doit(9)
• check_xprtsec_policy(9)
• check_nfsd_access(9)
• rqst_exp_find(9)

xoxo, your local Unix bestie — source/version: ./fs/nfsd, date: October 2026. slay, bye 💅✨