ipe_bdev_setintegrity(9)

💅 ipe_bdev_setintegrity(9) — the Kernel API Manual, bestie edition

okay so real talk, this one's from the Kernel API Manual and it's literally about saving integrity data from a bdev into IPE's LSM blob. yes that's a lot of letters. we got this 🫶

✨ SYNOPSIS ✨

int ipe_bdev_setintegrity (struct block_device *bdev , enum
lsm_integrity_type type , const void *value , size_t size );

the way that signature just sits there. iconic. copy it exactly, do not touch it, periodt 💅

🎀 ARGUMENTS 🎀

• bdev — hands you a pointer to a block_device that's holding the LSM blob. that's the whole vibe, it's the container, she's the main character 👑
• type — the integrity type. which flavor of integrity are we talking about, bestie? this tells you 🌸
• value — the actual value you're storing. the goods. the payload. no cap 💖
• size — the size of value. yeah we keep track of that, we're not animals ✨

🦋 DESCRIPTION 🦋

so like, this hook is currently used to save dm-verity's root hash into the LSM blob — OR — the existence of a validated signed dm-verity root hash. that's it, that's the job. it's giving very specific, very focused, very demure energy 🎀

lowkey important: it says "currently", so like. don't go building your whole personality on it forever, iykyk 🙈

🔥 RETURN 🔥

• 0 on success — slay, we ate 💅
• if an error occurs, the function returns the -errno. so a negative errno, meaning something went wrong and it's telling you exactly which thing 😭

🌈 SEE ALSO 🌈

the kernel file ./security/ipe/hooks.c (go read it, it's right there) plus her whole friend group:

• ipe_bprm_check_security(9)
• ipe_bprm_creds_for_exec(9)
• ipe_mmap_file(9)
• ipe_file_mprotect(9)
• ipe_kernel_read_file(9)
• ipe_kernel_load_data(9)
• ipe_unpack_initramfs(9)
• ipe_bdev_free_security(9)
• ipe_inode_setintegrity(9)

and that's the whole page, bestie!! this little gem lives in ./security/ipe and it's dated October 2026 — yes, from the future, we don't ask questions 💀✨ go forth and save those root hashes 🧚💜