landlock_trace_free_domain(9)

🎀 NAME 🎀

okay bestie, meet landlock_trace_free_domain(9) from the Kernel API Manual — the page for landlock_trace_free_domain: Emit a tracepoint on domain deallocation. 💅✨

✨ SYNOPSIS ✨

void landlock_trace_free_domain (const struct landlock_hierarchy *const
hierarchy );

🦋 ARGUMENTS 🦋

• hierarchy — the domain's hierarchy being deallocated. literally the thing getting freed, bestie 🫶

🌸 DESCRIPTION 🌸

okay so here's the vibe: this fires only for a hierarchy whose creation event was emitted — meaning one that left LANDLOCK_LOG_UNCOMMITTED in landlock_restrict_self. no cap. 🔥

the way this keeps the create/free pair balanced is honestly iconic: a hierarchy that never became observable is freed silently, while a domain that landlock_restrict_self created and a thread-sync failure then aborted still fires free_domain, because its creation event already fired. 🎀

called from landlock_log_free_domain. periodt. 💜

👑 SEE ALSO 👑

• Kernel file ./security/landlock/trace.c
• landlock_trace_denial(9)

mwah 💋 this cutie of a page is brought to you by source/version/date ./security/landlock, October 2026, and the manual itself is landlock_trace_free_domain(9) — catch you in the kernel, bestie 🫶🦋