revalidate_a...e_exceptions(9)

💅 revalidate_a...e_exceptions(9) — Kernel API Manual, bestie edition 🎀

okay so welcome to the revalidate_a...e_exceptions(9) page, my love — yes the title is doing that truncated thing, that's just how it is, we don't question the kernel's naming choices ✨

---

🌸 NAME 🌸

revalidate_active_exceptions — she walks through the active exception list and revalidates the exceptions based on parent's behavior and exceptions. The exceptions that are no longer valid will be removed. Called with devcgroup_mutex held. 🔒

literally do not skip the "called with devcgroup_mutex held" part, that's not a vibe suggestion, that's a whole locking contract, bestie 😭

---

✨ SYNOPSIS ✨

void revalidate_active_exceptions (struct dev_cgroup *devcg );

---

🦋 ARGUMENTS 🦋

• devcg — the cgroup whose exceptions will be checked. that's her, that's the main character of this function 💅

---

👑 DESCRIPTION 👑

okay so this is one of the three key functions for hierarchy implementation. three of them. the holy trinity, if you will 🫶

This function is responsible for re-evaluating all the cgroup's active exceptions due to a parent's exception change. like, parent changed their mind, so everybody downstream has to do a vibe check and update accordingly ✨

Refer to Documentation/admin-guide/cgroup-v1/devices.rst for more details — go read it, iykyk, it's giving necessary context 📖

---

🌈 SEE ALSO 🌈

• Kernel file ./security/device_cgroup.c
• dev_exception_clean(9)
• devcgroup_online(9)
• match_exception(9)
• match_exception_partial(9)
• verify_new_ex(9)
• parent_allows_removal(9)
• may_allow_all(9)
• propagate_exception(9)
• devcgroup_legacy_check_permission(9)

---

that's the whole page, bestie, you ate that 💖 no cap. this icon was brought to you by the <rainbow>./security</rainbow> directory, October 2026, and the one and only revalidate_a...e_exceptions(9) girl herself — go forth and revalidate responsibly 🧚‍♀️🌸