check_xprtsec_policy(9)

✨ check_xprtsec_policy(9) ✨

okay so bestie, we're in the Kernel API Manual today and the vibe is very NFS daemon security. stay with me, this one's actually cute and short 💅

---

🌸 NAME 🌸

check_xprtsec_policy — checks whether the xprtsec policy is gonna let you have access to the export, or if it's giving denied 😭

---

🎀 SYNOPSIS 🎀

__be32 check_xprtsec_policy (struct svc_export *exp , struct svc_rqst *rqstp );

---

🦋 ARGUMENTS 🦋

• exp — the svc_export that somebody's trying to access, like the thing at the door checking names 🫶
• rqstp — the svc_rqst doing the accessing of exp, aka the one knocking on the door

---

💖 DESCRIPTION 💖

so this is a helper function for check_nfsd_access. and like, huge note: callers should be using check_nfsd_access instead of calling this function directly. not me emphasizing that twice, but fr fr, don't come for me later 💀

the one exception is __fh_verify, because it has logic that may result in one or both of the helpers being skipped. so yeah, that one gets a pass, she's special 👑

Return values: nfs_ok if access is granted, or nfserr_wrongsec if access is denied. slay or no slay, those are your only two options ✨

---

🧚 SEE ALSO 🧚

Kernel file ./fs/nfsd/export.c

• nfsd_nl_expkey_get_reqs_dumpit(9)
• nfsd_nl_parse_one_expkey(9)
• nfsd_nl_expkey_set_reqs_doit(9)
• nfsd_nl_svc_export_get_reqs_dumpit(9)
• nfsd_nl_parse_fslocations(9)
• nfsd_nl_parse_one_export(9)
• nfsd_nl_svc_export_set_reqs_doit(9)
• check_security_flavor(9)
• check_nfsd_access(9)
• rqst_exp_find(9)

---

reminder bestie: this is a helper. go through check_nfsd_access. iykyk 🫶

---

and that's the whole page, periodt 💫 this little gem lives in ./fs/nfsd, dated October 2026, straight from the Kernel API Manual — mwah, go read the real source and stay iconic 👑💜