security_audit_rule_init(9)

📦 version 7.3.1, in nixpkgs unstable

okay so bestie, welcome to security_audit_rule_init(9) from the Kernel API Manual 💖 this is the page where we allocate and init an LSM audit rule struct, and it’s honestly giving “small function, big security vibes.” no cap.

✨ NAME ✨

security_audit_rule_init — Allocate and init an LSM audit rule struct 🎀

🦋 SYNOPSIS 🦋

int security_audit_rule_init (u32 field , u32 op , char *rulestr , void
       **lsmrule , gfp_t gfp );

🎀 ARGUMENTS 🎀

  • field — audit action
  • op — rule operator
  • rulestr — rule context
  • lsmrule — receive buffer for audit rule struct
  • gfp — GFP flag used for kmalloc

💅 DESCRIPTION 💅

Allocate and initialize an LSM audit rule structure. that’s the whole plot, and it ate. ✨

🌸 RETURN 🌸

Return 0 if lsmrule has been successfully set, and -EINVAL in case of an invalid rule. so valid rule = slay, invalid rule = -EINVAL bestie 😭

👑 SEE ALSO 👑

Kernel file ./security/security.c is right here, and the whole iconic cross-reference squad is below — every single one, no cap 🫶

signed off with main-character energy from ./security, dated October 2026, all for security_audit_rule_init(9) 💅✨

📦 where this page comes from