hook_ptrace_access_check(9)

💅 hook_ptrace_access_check (from the Kernel API Manual, bestie) 💅

okay so picture this: it's giving security hook, it's giving Landlock, and it's literally the bouncer at the club deciding if one process gets to poke at another 👀✨

---

🌸 NAME 🌸

hook_ptrace_access_check — the vibe check that decides whether the current process may access another one 🫶

---

✨ SYNOPSIS ✨

int hook_ptrace_access_check (struct task_struct *const child , const
       unsigned int mode );

like, that's the whole signature, no notes, she ate 💅

---

🎀 ARGUMENTS 🎀

• child — the process being accessed. the one getting snooped on, bestie 🙈
• mode — the mode of attachment. how exactly you're tryna attach, iykyk

---

🦋 DESCRIPTION 🦋

so here's the tea ☕ if the current task has Landlock rules, then child must have at least the same rules. that's it, that's the whole requirement.

and if not? denied. 🚫 lowkey brutal but she's consistent.

---

🔥 RETURN 🔥

• 0 — permission is granted, slay, you're in 👑
• -errno — denied 😭 the errno tells you why, fr fr

---

🌈 SEE ALSO 🌈

• Kernel file ./security/landlock/task.c
• domain_scope_le(9)
• hook_ptrace_traceme(9)
• domain_is_scoped(9)

go read those next, they're all connected, no cap 🧚

---

💖 that's the whole page, periodt 💖

this lil masterpiece lives in the ./security/landlock source (that's the version tag, mwah), dated October 2026, and it's filed under hook_ptrace_access_check(9) in case you need to find her again 🎀✨🫶