match_mnt(9)

💅 match_mnt(9) — like, the mount path matcher, bestie

okay so this is a page from the Kernel API Manual, and honestly? it's a whole vibe. it's giving "low-level AppArmor mount checking" and if you're here you probably already know what you're doing, but let's walk it together anyway 🫶

---

✨ NAME ✨

match_mnt — handle path matching for mount 💫

like, literally the function that deals with path matching when something's getting mounted. that's the whole job. iconic.

---

🌸 SYNOPSIS 🌸

int match_mnt (struct aa_profile *profile , const struct path *path ,
char *buffer , const struct path *devpath , char *devbuffer , const char
*type , unsigned long flags , void *data , bool binary , struct
apparmor_audit_data *ad );

ten (10) arguments bestie. TEN. she's high-maintenance and we respect it 👑

---

🎀 ARGUMENTS 🎀

okay so here's who's who in the group chat:

• profile — the confining profile. she's the one in charge, the main character of the whole operation ✨
• path — the path for the mntpnt. and listen: NOT NULL. don't even think about it 🙅‍♀️
• buffer — buffer to be used to lookup mntpath. that's her job, that's her moment 💅
• devpath — path devname/src_name. MAYBE NULL, so she's flexible, she might show up, she might not 😌
• devbuffer — buffer to be used to lookup devname/src_name. baby buffer for the dev name lookup 🍼
• type — string for the dev type. MAYBE NULL — again, optional queen 🌈
• flags — mount flags to match. gotta match 'em, no cap 🚩
• data — fs mount data. MAYBE NULL — third optional icon in this cast 💜
• binary — whether data is binary. yes/no moment, simple as that ⭐
• ad — apparmor audit data structure. the receipts, the paper trail, the audit tea ☕

fr fr, notice which ones say NOT NULL vs MAYBE NULL — that distinction is literally the whole point. path is mandatory, devpath, type and data are the chill optional ones 🙈

---

🔥 RETURN 🔥

0 on success, else error. that's it. that's the whole deal. zero means slay, anything else means something went sideways 💀

---

🦋 SEE ALSO 🦋

go read these next, iykyk:

• Kernel file ./security/apparmor/mount.c
• audit_cb(9)
• match_mnt_flags(9)
• match_mnt_path_str(9)

---

okay that's the page!! this one lives under ./security/apparmor, dated October 2026, and she ate, no crumbs 🍓 mwah 💖