landlock_merge_ruleset(9)

🦋 NAME 🦋

bestie, welcome to landlock_merge_ruleset(9) from the Kernel API Manual — it’s giving “merge a ruleset with a domain” energy 💅✨

landlock_merge_ruleset — Merge a ruleset with a domain.

---

✨ SYNOPSIS ✨

struct landlock_domain * landlock_merge_ruleset (struct landlock_domain
       *const parent , struct landlock_ruleset *const ruleset );

---

🎀 ARGUMENTS 🎀

• parent — Parent domain. The main-character domain you’re building on 🌸
• ruleset — New ruleset to be merged. Fresh ruleset, come on in 🫶

---

💖 DESCRIPTION 💖

okay so the current task is literally requesting to be restricted 🔒 and bestie, the subjective credentials must not be in an overridden state. cf. landlock_init_hierarchy_log. No cap, that’s important 💀

🚨 HARD REQUIREMENT: the caller must hold ruleset->lock. Do not skip this, fr fr.

---

🌟 RETURN 🌟

On success, you get a new domain merging parent and ruleset — iconic behavior 👑 Or you get ERR_PTR on failure 😭

If parent is NULL, the new domain duplicates ruleset. Periodt.

---

🌈 SEE ALSO 🌈

• Kernel file ./security/landlock/domain.c
• landlock_unmask_layers(9)
• landlock_init_layer_masks(9)
• get_current_exe(9)
• landlock_init_hierarchy_log(9)
• landlock_get_quiet_optional_accesses(9)

---

with love from the source ./security/landlock, dated October 2026, for landlock_merge_ruleset(9) 🎀💖