label_components_match(9)
π NAME π
hiii bestie!! welcome to label_components_match(9), straight out of the Kernel API Manual β¨ this one is lowkey niche but it's giving kernel-internals main character energy, and we're gonna get through it together π«Ά
label_components_match β find perms for all subcomponents of a label. periodt π
πΈ SYNOPSIS πΈ
int label_components_match (const struct aa_profile *profile , struct
aa_ruleset *rules , struct aa_label *label , aa_state_t start , bool
inview , u32 request , struct aa_perms *perms );
β¨ ARGUMENTS β¨
profileβ profile to find perms for πrulesβ ruleset to search πlabelβ label to check access permissions for πstartβ state to start match in π±inviewβ whether to match labels in view or only in scope π¦requestβ permissions to request πpermsβ an initialized perms struct to add accumulation to π
π RETURN π
the state the match finished in, may be the none matching state π
like, it hands back the state where the match ended up, and yes, that can be the none matching state β no cap, don't panic if that's what you get π
π¦ DESCRIPTION π¦
okay so for the label A//B//C, this does the perm match for each of A and B and C β¨ all three get their moment, fr fr.
bestie, listen:permsshould be preinitialized withallpermsOR a previous permission check to be stacked. that's literally the setup π
π SEE ALSO π
Kernel file ./security/apparmor/label.c β plus the whole referenced bestie circle: ns_cmp(9), profile_cmp(9), vec_cmp(9), aa_vec_unique(9), aa_label_alloc(9), label_cmp(9), __aa_label_next_not_in_set(9), aa_label_is_subset(9), aa_label_is_unconfined_subset(9), __label_remove(9), __label_replace(9), __label_insert(9), __vec_find(9), __label_find(9), aa_label_remove(9), aa_label_replace(9), vec_find(9), aa_label_insert(9), aa_label_next_in_merge(9), label_merge_cmp(9), label_merge_insert(9), labelset_of_merge(9), __label_find_merge(9), aa_label_find_merge(9), aa_label_merge(9), label_compound_match(9), aa_label_match(9), aa_update_label_name(9), aa_profile_snxprint(9), aa_label_snxprint(9), aa_label_asxprint(9), aa_label_acntsxprint(9), aa_label_strn_parse(9), aa_labelset_destroy(9), __label_update(9), __labelset_update(9), __aa_labelset_update_subtree(9) π«Ά
kisses!! this page came from the source/version tag ./security/apparmor, dated October 2026, and it's serving label_components_match(9) manual-page realness β bye bestie π
β¨
π¦ where this page comes from
- nixpkgs unstable: linux-manual 7.3.1
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms