domain_is_scoped(9)

✨ NAME ✨

okay so bestie, welcome to domain_is_scoped(9) from the Kernel API Manual 💖 this one is literally a vibe check for an interaction from a client/sender to a server/receiver — it checks whether that interaction should be restricted based on scope controls. no cap, that’s the whole assignment.

🌸 SYNOPSIS 🌸

bool domain_is_scoped (const struct landlock_domain *const client ,
const struct landlock_domain *const server , access_mask_t scope );

🎀 ARGUMENTS 🎀

• client — the IPC sender domain. like, the one sending the message 💌
• server — the IPC receiver domain. the one receiving the message 🫶
• scope — the scope restriction criteria. the rules we’re checking against ✨

🔥 RETURN 🔥

Returns true if server is in a different domain from client and client is scoped to access server (i.e. access should be denied), false otherwise. so yes bestie, sometimes the answer is “deny” 💅 and sometimes it’s “you’re good.”

🦋 SEE ALSO 🦋

• Kernel file ./security/landlock/task.c
• domain_scope_le(9)
• hook_ptrace_access_check(9)
• hook_ptrace_traceme(9)

mwah 💅 this page lives in ./security/landlock, dated October 2026, and yes it’s still domain_is_scoped(9). periodt. 🎀