landlock_audit_denial(9)

💅 landlock_audit_denial(9) — Kernel API Manual 💅

okay bestie, welcome to the Kernel API Manual page for landlock_audit_denial(9) — the function that makes an audit record when somebody gets denied access. no cap, it's giving security receipts. 🧾✨

🎀 NAME 🎀

landlock_audit_denial — create an audit record for a denied access request. 💖

✨ SYNOPSIS ✨

void landlock_audit_denial (const struct landlock_request *const request
, struct landlock_hierarchy *const youngest_denied , const access_mask_t
missing , const bool logged );

🫶 ARGUMENTS 🫶

• request — the detail of the user space request. like, all the deets of what user space asked for. 👀
• youngest_denied — the youngest hierarchy node that denied the access. she's the one who said “absolutely not.” 💅
• missing — the set of denied access rights. literally the list of things that didn't make it through. 🙈
• logged — whether the denial is selected for logging, as computed by landlock_log_denial (domain policy and quiet rules). so this is the “are we putting this in the group chat?” boolean. 📝

🌸 DESCRIPTION 🌸

Emits the record when audit is enabled and the denial is selected for logging. that's the whole serve: audit on + denial picked for logging = record gets emitted. periodt. 🔥

🦋 SEE ALSO 🦋

• Kernel file ./security/landlock/audit.c
• landlock_audit_free_domain(9)

mwah 💋 bestie, that's the page — brought to you by the Kernel API Manual, source/version ./security/landlock, dated October 2026. slay responsibly. 🌈👑