cipso_v4_gentag_rbm(9)
π cipso_v4_gentag_rbm(9) β from the Kernel API Manual, bestie π
okay so real talk, this is a page straight out of the Kernel API Manual, and it's about making one (1) very specific little tag. stay with me, it's cute actually.
β¨ NAME β¨
cipso_v4_gentag_rbm β generates a CIPSO restricted bitmap tag (tag type #1). that's it. that's the whole vibe. π
π SYNOPSIS π
int cipso_v4_gentag_rbm (const struct cipso_v4_doi *doi_def ,
const struct netlbl_lsm_secattr *secattr ,
unsigned char *buffer ,
u32 buffer_len );
like, four things go in and an int comes out. slay.
π¦ ARGUMENTS π¦
doi_defβ the DOI definition. yes bestie, the DOI definition, not the DOI itself, keep up πsecattrβ the security attributes. the whole point of the operation lowkey.bufferβ the option buffer. this is where the tag gets written, main character energy.buffer_lenβ length ofbuffer, and it's measured in bytes. not bits. bytes. iykyk.
πΈ DESCRIPTION πΈ
so what this function does is generate a CIPSO option using the restricted bitmap tag, tag type #1. iconic, honestly. π
here's the one thing you actually need to clock: the actual buffer length may be larger than the indicated size, and that's because of translation between the host and network category bitmaps. so don't come for it when the number doesn't line up, that's just the gig. π
- returns the size of the tag on success π
- returns negative values on failure π
π₯ SEE ALSO π₯
okay this list is genuinely giving "everyone showed up to the party," and you will be respecting each and every one of them:
- Kernel file:
./net/ipv4/cipso_ipv4.c
and the whole friend group:
cipso_v4_cache_entry_free(9)cipso_v4_map_cache_hash(9)cipso_v4_cache_init(9)cipso_v4_cache_invalidate(9)cipso_v4_cache_check(9)cipso_v4_cache_add(9)cipso_v4_doi_search(9)cipso_v4_doi_add(9)cipso_v4_doi_free(9)cipso_v4_doi_free_rcu(9)cipso_v4_doi_remove(9)cipso_v4_doi_getdef(9)cipso_v4_doi_putdef(9)cipso_v4_doi_walk(9)cipso_v4_map_lvl_valid(9)cipso_v4_map_lvl_hton(9)cipso_v4_map_lvl_ntoh(9)cipso_v4_map_cat_rbm_valid(9)cipso_v4_map_cat_rbm_hton(9)cipso_v4_map_cat_rbm_ntoh(9)cipso_v4_map_cat_enum_valid(9)cipso_v4_map_cat_enum_hton(9)cipso_v4_map_cat_enum_ntoh(9)cipso_v4_map_cat_rng_valid(9)cipso_v4_map_cat_rng_hton(9)cipso_v4_map_cat_rng_ntoh(9)cipso_v4_gentag_hdr(9)cipso_v4_parsetag_rbm(9)cipso_v4_gentag_enum(9)cipso_v4_parsetag_enum(9)cipso_v4_gentag_rng(9)cipso_v4_parsetag_rng(9)cipso_v4_gentag_loc(9)cipso_v4_parsetag_loc(9)cipso_v4_optptr(9)cipso_v4_validate(9)cipso_v4_error(9)cipso_v4_genopt(9)cipso_v4_sock_setattr(9)cipso_v4_req_setattr(9)cipso_v4_delopt(9)cipso_v4_sock_delattr(9)cipso_v4_req_delattr(9)cipso_v4_getattr(9)cipso_v4_sock_getattr(9)cipso_v4_skbuff_setattr(9)cipso_v4_skbuff_delattr(9)cipso_v4_init(9)
no cap, that's the whole guest list. π«Ά
and that's the page, bestie!! this little icon dropped from ./net/ipv4 back in October 2026 β catch you in the next manpage, mwah πβ¨π
π¦ where this page comes from
- nixpkgs unstable: linux-manual 7.3.1
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms