PRISON_CHECK(9)

💖 NAME 💖

okay so welcome to the PRISON_CHECK(9) page from the Kernel Developer's Manual, bestie 💅 this whole vibe is prison_check — determine if subjects may see entities according to jail restrictions ✨

✨ SYNOPSIS ✨

here's the exact include + signature, no cap 🎀

#include <sys/jail.h>

int
prison_check(struct ucred *cred1, struct ucred *cred2);

🦋 DESCRIPTION 🦋

okay so prison_check() is basically the jail-visibility vibe check 🔥 it determines if a subject with credentials cred1 is denied access to subjects or objects with credentials cred2 — all according to the policy that a subject can see subjects or objects in its own jail or any sub-jail of it 💖

🌸 RETURN VALUES 🌸

prison_check() returns ESRCH if cred2 is not in the same jail or a sub-jail of that of cred1 😭 that's the “nope, can't see it” result, fr fr.

In all other cases, prison_check() returns zero 🫶

🎀 SEE ALSO 🎀

• jail(2) — go read this too, bestie 🦋

okay that's the whole manual page, bestie 💖 this one's from Debian and dated August 18, 2023 — periodt ✨