replacement_allowed(9)

replacement_allowed(9) 💅✨

okay so bestie, welcome to the Kernel API Manual side of town 🫶 this page is replacement_allowed, aka the little test that checks if replacement is allowed. That's it. That's the assignment. Let's get into it 😌

NAME 🎀

replacement_allowed — test to see if replacement is allowed 💅

SYNOPSIS 📜

int replacement_allowed (struct aa_profile *profile , int noreplace ,
       const char **info );

ARGUMENTS 💬

• profile — profile to test if it can be replaced (MAYBE NULL) 👑
• noreplace — true if replacement shouldn't be allowed but addition is okay 🚫
• info — Returns - info about why replacement failed (NOT NULL) 🫶

RETURN 🔁

0 if replacement allowed, else error code. no cap, that's the whole return vibe ✨

SEE ALSO 👀

Kernel file ./security/apparmor/policy.c — plus the whole linked-up friend group, all here, all accounted for:

• aa_pdb_free_kref(9)
• __add_profile(9)
• __list_remove_profile(9)
• __remove_profile(9)
• __aa_profile_list_release(9)
• aa_free_data(9)
• aa_free_profile(9)
• aa_alloc_profile(9)
• __strn_find_child(9)
• __find_child(9)
• aa_find_child(9)
• __lookup_parent(9)
• __create_missing_ancestors(9)
• __lookupn_profile(9)
• aa_lookupn_profile(9)
• __aa_new_learning_profile(9)
• audit_policy(9)
• aa_policy_view_capable(9)
• aa_may_manage_policy(9)
• __replace_profile(9)
• __lookup_replace(9)
• aa_replace_profiles(9)
• aa_remove_profiles(9)

mwah 💋 signed off from ./security/apparmor, dated October 2026 — and yes, it's still replacement_allowed(9) energy. periodt. 🌈