ENUM TB_SECURITY_LEVEL(9)

πŸ“¦ version 7.3.1, in nixpkgs unstable

πŸ¦‹ enum tb_security_level β€” the Thunderbolt security level glow-up πŸ¦‹

okay bestie, so this is a page straight out of the Kernel API Manual β€” enum tb_security_level(9), no cap. and it's literally about how locked-down your Thunderbolt port is. security levels?? in MY kernel?? it's more likely than you think πŸ’…


✨ NAME ✨

enum tb_security_level β€” the Thunderbolt security level, bestie βš‘πŸ”’


🌸 SYNOPSIS 🌸

here's the whole enum, verbatim, don't touch:

enum tb_security_level {
    TB_SECURITY_NONE ,
    TB_SECURITY_USER ,
    TB_SECURITY_SECURE ,
    TB_SECURITY_DPONLY ,
    TB_SECURITY_USBONLY ,
    TB_SECURITY_NOPCIE

};

like, that's the entire vibe right there πŸŽ€


πŸ‘‘ Constants πŸ‘‘

these are the levels, from most chaotic to most locked-down-ish, in the order the page gives them:

  • TB_SECURITY_NONE β€” no security at all, it's giving legacy mode πŸ™ˆ nothing is checking you, bestie.
  • TB_SECURITY_USER β€” user approval is required at minimum 🫢 so like, you gotta say yes.
  • TB_SECURITY_SECURE β€” a one time saved key is required at minimum πŸ”‘βœ¨ fancy.
  • TB_SECURITY_DPONLY β€” only tunnels Display port (and USB) πŸ–₯️ that's it, that's the whole tunnel.
  • TB_SECURITY_USBONLY β€” only tunnels the USB controller of the connected Thunderbolt dock (and Display Port). all PCIe links downstream of the dock are removed πŸ’€ like, gone gone.
  • TB_SECURITY_NOPCIE β€” for USB4 systems, this level is used when PCIe tunneling is disabled from the BIOS 🧚 BIOS said no.

🌈 SEE ALSO 🌈

go read these next, iykyk πŸ‘€:

  • Kernel file ./include/linux/thunderbolt.h
  • struct tb(9)
  • struct tb_property_dir(9)
  • struct tb_property(9)
  • enum tb_link_width(9)
  • struct tb_xdomain(9)
  • struct tb_protocol_handler(9)
  • struct tb_service(9)
  • struct tb_service_driver(9)
  • struct tb_nhi(9)
  • struct tb_ring(9)
  • enum ring_desc_flags(9)
  • struct ring_frame(9)
  • tb_ring_rx(9)
  • tb_ring_tx(9)
  • tb_ring_dma_device(9)

πŸ’– that's the whole page, bestie. every constant, every "at minimum," every removed PCIe link. nothing skipped, periodt.

kisses, and remember: this page lives in ./include/linux, dated October 2026, filed under enum tb_security_level(9) β€” slay πŸŽ€πŸ¦‹πŸ’œ

πŸ“¦ where this page comes from