landlock_get...nal_accesses(9)

💅 landlock_get...nal_accesses(9) 💅

okay so this is a page from the Kernel API Manual (yes, the kernel has a manual, she's iconic like that) and today we're learning about landlock_get_quiet_optional_accesses(9) 🎀

---

✨ NAME ✨

landlock_get_quiet_optional_accesses — get the optional accesses that are covered by the quiet rule flags 🦋

like, the whole point: which optional accesses are being covered by quiet rule flags. that's the vibe check of this function, fr fr.

---

🌸 SYNOPSIS 🌸

optional_access_t landlock_get_quiet_optional_accesses (const access_mask_t all_existing_optional_access , const deny_masks_t deny_masks , const struct layer_masks *const masks );

she takes three args and gives you back a bitmask. periodt. ✨

---

💖 ARGUMENTS 💖

• all_existing_optional_access — bitmask of the valid optional accesses, aka the full guest list of which optional accesses even exist 👑
• deny_masks — the domain layer levels that denied each optional access (this is literally the deny_masks field on struct landlock_file_security, iykyk) 🔥
• masks — the struct layer_masks that got collected during the path walk 🧚

---

⭐ RETURN ⭐

she returns a bitmask of which optional accesses are denied by layers where the quiet flag was collected during the path walk 💅 like, the answer to "who got quietly denied" no cap.

ngl bestie, the return value is a bitmask, so don't try to read it like a boolean — read it bit by bit 🫶

---

🌈 SEE ALSO 🌈

• Kernel file ./security/landlock/domain.c 📁
• landlock_unmask_layers(9)
• landlock_init_layer_masks(9)
• landlock_merge_ruleset(9)
• get_current_exe(9)
• landlock_init_hierarchy_log(9)

---

and that's the whole page bestie, no crumbs left 🍓

mwah 💋 — brought to you by ./security/landlock, October 2026, go read the source, she slays 🌟