landlock_ge...able_subject(9)

💅 landlock_ge...able_subject(9)

okay so bestie, welcome to the Kernel API Manual — yes it's the manpage literally called landlock_ge...able_subject(9) (the terminal ate the middle of the name, she's shy like that 💀). landlock_ge...able_subject(9) is also the manual name, so now you have it twice, you're welcome 🫶

---

✨ NAME ✨

landlock_get_applicable_subject — returns the subject's Landlock credential if its enforced domain applies to (like, handles) at least one of the access rights you listed in @masks. That's it, that's the whole job. 🎀

---

🌸 SYNOPSIS 🌸

const struct landlock_cred_security * landlock_get_applicable_subject
(const struct cred *const cred , const struct access_masks masks ,
size_t *const handle_layer );

no cap, that's the exact signature, don't come for me about the spacing, I copy things character for character around here 💅

---

🦋 ARGUMENTS 🦋

• cred — the credential. yep. that's the whole vibe of this one 🌈
• masks — the access masks. the list of access rights we're checking against ✨
• handle_layer — the returned youngest layer that handles a subset of masks. And listen: it is not set if the function returns NULL. so don't go reading it after a NULL, that's giving uninitialised-memory main character energy 😭

---

🔥 RETURN 🔥

landlock_cred(cred) if any access rights specified in masks is handled — or NULL otherwise. simple as that, periodt. 👑

---

🧚 SEE ALSO 🧚

• Kernel file ./security/landlock/cred.h
• struct landlock_cred_security(9)

---

ngl bestie, the whole "youngest layer handling a subset of masks" thing is the juicy part — that's your iykyk moment 🍓

---

so yeah, that's the page 💖 shoutout to the source file ./security/landlock and the version date October 2026, and once again the title landlock_ge...able_subject(9) because she refuses to spell her whole name. mwah, slay, go read your credentials 🌟🎀