ENUM TB_SECURITY_LEVEL(9)
π¦ enum tb_security_level β the Thunderbolt security level glow-up π¦
okay bestie, so this is a page straight out of the Kernel API Manual β enum tb_security_level(9), no cap. and it's literally about how locked-down your Thunderbolt port is. security levels?? in MY kernel?? it's more likely than you think π
β¨ NAME β¨
enum tb_security_level β the Thunderbolt security level, bestie β‘π
πΈ SYNOPSIS πΈ
here's the whole enum, verbatim, don't touch:
enum tb_security_level {
TB_SECURITY_NONE ,
TB_SECURITY_USER ,
TB_SECURITY_SECURE ,
TB_SECURITY_DPONLY ,
TB_SECURITY_USBONLY ,
TB_SECURITY_NOPCIE
};
like, that's the entire vibe right there π
π Constants π
these are the levels, from most chaotic to most locked-down-ish, in the order the page gives them:
TB_SECURITY_NONEβ no security at all, it's giving legacy mode π nothing is checking you, bestie.TB_SECURITY_USERβ user approval is required at minimum π«Ά so like, you gotta say yes.TB_SECURITY_SECUREβ a one time saved key is required at minimum πβ¨ fancy.TB_SECURITY_DPONLYβ only tunnels Display port (and USB) π₯οΈ that's it, that's the whole tunnel.TB_SECURITY_USBONLYβ only tunnels the USB controller of the connected Thunderbolt dock (and Display Port). all PCIe links downstream of the dock are removed π like, gone gone.TB_SECURITY_NOPCIEβ for USB4 systems, this level is used when PCIe tunneling is disabled from the BIOS π§ BIOS said no.
π SEE ALSO π
go read these next, iykyk π:
- Kernel file
./include/linux/thunderbolt.h struct tb(9)struct tb_property_dir(9)struct tb_property(9)enum tb_link_width(9)struct tb_xdomain(9)struct tb_protocol_handler(9)struct tb_service(9)struct tb_service_driver(9)struct tb_nhi(9)struct tb_ring(9)enum ring_desc_flags(9)struct ring_frame(9)tb_ring_rx(9)tb_ring_tx(9)tb_ring_dma_device(9)
π that's the whole page, bestie. every constant, every "at minimum," every removed PCIe link. nothing skipped, periodt.
kisses, and remember: this page lives in ./include/linux, dated October 2026, filed under enum tb_security_level(9) β slay ππ¦π
π¦ where this page comes from
- nixpkgs unstable: linux-manual 7.3.1
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms