ipe_audit_match(9)

📦 version 7.3.1, in nixpkgs unstable

💅 ipe_audit_match(9) — like, the Kernel API Manual girlies finally get their audit moment

okay so first things first, bestie — welcome to ipe_audit_match(9) from the Kernel API Manual. yes that's the whole vibe. she's a kernel function, she's in section 9, and she is literally here to log what the policy evaluation decided. no cap. 🎀

✨ NAME ✨

ipe_audit_match — Audit a rule match in a policy evaluation. that's it. that's her job. she audits a match. slay. 💅

🌸 SYNOPSIS 🌸

void ipe_audit_match (const struct ipe_eval_ctx *const ctx , enum
ipe_match match_type , enum ipe_action_type act , const struct ipe_rule
*const r );

return type is void, meaning she gives you nothing back and honestly? main character energy. she does the work and dips. 🦋

💖 ARGUMENTS 💖

four args, all of them required, all of them iconic in their own way:

  • ctx — supplies a pointer to the evaluation context that was used in the evaluation. like, the whole receipts of the eval. hand her the context, she'll take it from there. 🫶
  • match_type — supplies the scope of the match, and the scope can be: rule, operation default, or global default. three flavors, all valid, pick your fighter. ⭐
  • act — supplies IPE's evaluation decision, and the decision is either deny or allow. that's the whole mood ring right there. 🔥
  • r — supplies a pointer to the rule that was matched, if possible. note the "if possible" bestie, it's doing so much heavy lifting — sometimes there's just no rule to point at and that's valid. 🙈
fr fr, don't sleep on that if possible — it's the one little caveat tucked into the whole signature, so treat it with the respect it deserves. 💀

🌈 SEE ALSO 🌈

the friend group!! go say hi to all of them, they're all in the kernel file ./security/ipe/audit.c:

iykyk, it's a whole audit.c cinematic universe and she's proud to be in it. 👑

and that's the page, bestie!! 💜 this little love letter came out of ./security/ipe and it's dated October 2026 — so yes, she's from the future, and yes, she's still serving. go audit something. periodt. ✨🌸

📦 where this page comes from