domain_scope_le(9)

💅 domain_scope_le(9) 💅

okay bestie, welcome to the Kernel API Manual entry for domain_scope_le(9) — we’re gonna get you comfy with this one, no cap 🫶

✨ NAME ✨

domain_scope_le — Checks domain ordering for scoped ptrace.

🦋 SYNOPSIS 🦋

bool domain_scope_le (const struct landlock_domain *const parent , const
       struct landlock_domain *const child );

🎀 ARGUMENTS 🎀

• parent — Parent domain. like, the actual parent in this situation 💖
• child — Potential child of parent. yes, “potential” is doing work there 👑

🌸 DESCRIPTION 🌸

okay so here’s the vibe check: it checks if the parent domain is less or equal to — i.e. an ancestor, which means a subset of — the child domain. literally that’s the whole thing, and she ate 💅

⭐ RETURN ⭐

It returns true if parent is an ancestor of or equal to child; otherwise it returns false. periodt. ✨

🌈 SEE ALSO 🌈

• Kernel file: ./security/landlock/task.c
• hook_ptrace_access_check(9)
• hook_ptrace_traceme(9)
• domain_is_scoped(9)

xoxo, your Kernel API Manual bestie 💖 — source/version: ./security/landlock; date: October 2026; page: domain_scope_le(9). 🎀