security_inet_csk_clone(9)
π security_inet_csk_clone β the Kernel API Manual glow-up π
okay so bestie, welcome to the security_inet_csk_clone(9) page β¨ it lives in the Kernel API Manual, and it's honestly a tiny little function with main character energy. let's get into it π«Ά
πΈ NAME πΈ
security_inet_csk_clone β no cap, this one sets the new sock's LSM state based on the request_sock π
β¨ SYNOPSIS β¨
void security_inet_csk_clone (struct sock *newsk , const struct
request_sock *req );
literally returns void, so no return value drama. periodt π
π¦ ARGUMENTS π¦
newskβ the brand newsock, fresh out the box πreqβ the connection'srequest_sock, i.e. where the vibe is coming from π
π₯ DESCRIPTION π₯
so here's the tea β β this function sets the LSM state of the sock using the LSM state from req. that's it. that's the whole function. short, sweet, iconic π
π SEE ALSO π
the kernel file is ./security/security.c, and ngl the friend group here is huge. like, whole-group-chat big ππ every single one of these is in (9):
lsm_file_alloc, lsm_backing_file_alloc, lsm_blob_alloc, lsm_cred_alloc, lsm_inode_alloc, lsm_task_alloc, lsm_ipc_alloc, lsm_key_alloc, lsm_msg_msg_alloc, lsm_bdev_alloc, lsm_bpf_map_alloc, lsm_bpf_prog_alloc, lsm_bpf_token_alloc, lsm_superblock_alloc, lsm_fill_user_ctx, security_binder_set_context_mgr, security_binder_transaction, security_binder_transfer_binder, security_binder_transfer_file, security_ptrace_access_check, security_ptrace_traceme, security_capget, security_capset, security_capable, security_quotactl, security_quota_on, security_syslog, security_settime64, security_vm_enough_memory_mm, security_bprm_creds_for_exec, security_bprm_creds_from_file, security_bprm_check, security_bprm_committing_creds, security_bprm_committed_creds, security_fs_context_submount, security_fs_context_dup, security_fs_context_parse_param, security_sb_alloc, security_sb_delete, security_sb_free, security_free_mnt_opts, security_sb_eat_lsm_opts, security_sb_mnt_opts_compat, security_sb_remount, security_sb_kern_mount, security_sb_show_options, security_sb_statfs, security_sb_mount, security_sb_umount, security_sb_pivotroot, security_sb_set_mnt_opts, security_sb_clone_mnt_opts, security_move_mount, security_path_notify, security_inode_alloc, security_inode_free, security_dentry_init_security, security_dentry_create_files_as, security_inode_init_security, security_inode_init_security_anon, security_path_mknod, security_path_post_mknod, security_path_mkdir, security_path_rmdir, security_path_unlink, security_path_symlink, security_path_link, security_path_rename, security_path_truncate, security_path_chmod, security_path_chown, security_path_chroot, security_inode_create, security_inode_post_create_tmpfile, security_inode_link, security_inode_unlink, security_inode_symlink, security_inode_mkdir, security_inode_rmdir, security_inode_mknod, security_inode_rename, security_inode_readlink, security_inode_follow_link, security_inode_permission, security_inode_setattr, security_inode_post_setattr, security_inode_getattr, security_inode_setxattr, security_inode_set_acl, security_inode_post_set_acl, security_inode_get_acl, security_inode_remove_acl, security_inode_post_remove_acl, security_inode_post_setxattr, security_inode_getxattr, security_inode_listxattr, security_inode_removexattr, security_inode_post_removexattr, security_inode_file_setattr, security_inode_file_getattr, security_inode_need_killpriv, security_inode_killpriv, security_inode_getsecurity, security_inode_setsecurity, security_inode_listsecurity, security_inode_getlsmprop, security_inode_copy_up, security_inode_copy_up_xattr, security_inode_setintegrity, security_kernfs_init_security, security_file_permission, security_file_alloc, security_file_release, security_file_free, security_backing_file_alloc, security_backing_file_free, security_file_ioctl, security_file_ioctl_compat, security_mmap_file, security_mmap_backing_file, security_mmap_addr, security_file_mprotect, security_file_lock, security_file_fcntl, security_file_set_fowner, security_file_send_sigiotask, security_file_receive, security_file_open, security_file_post_open, security_file_truncate, security_task_alloc, security_task_free, security_cred_alloc_blank, security_cred_free, security_prepare_creds, security_transfer_creds, security_cred_getsecid, security_cred_getlsmprop, security_kernel_act_as, security_kernel_create_files_as, security_kernel_module_request, security_kernel_read_file, security_kernel_post_read_file, security_kernel_load_data, security_kernel_post_load_data, security_task_fix_setuid, security_task_fix_setgid, security_task_fix_setgroups, security_task_setpgid, security_task_getpgid, security_task_getsid, security_current_getlsmprop_subj, security_task_getlsmprop_obj, security_task_setnice, security_task_setioprio, security_task_getioprio, security_task_prlimit, security_task_setrlimit, security_task_setscheduler, security_task_getscheduler, security_task_movememory, security_task_kill, security_task_prctl, security_task_to_inode, security_create_user_ns, security_ipc_permission, security_ipc_getlsmprop, security_msg_msg_alloc, security_msg_msg_free, security_msg_queue_alloc, security_msg_queue_free, security_msg_queue_associate, security_msg_queue_msgctl, security_msg_queue_msgsnd, security_msg_queue_msgrcv, security_shm_alloc, security_shm_free, security_shm_associate, security_shm_shmctl, security_shm_shmat, security_sem_alloc, security_sem_free, security_sem_associate, security_sem_semctl, security_sem_semop, security_d_instantiate, security_getselfattr, security_setselfattr, security_getprocattr, security_setprocattr, security_ismaclabel, security_secid_to_secctx, security_lsmprop_to_secctx, security_secctx_to_secid, security_release_secctx, security_inode_invalidate_secctx, security_inode_notifysecctx, security_inode_setsecctx, security_inode_getsecctx, security_post_notification, security_watch_key, security_netlink_send, security_unix_stream_connect, security_unix_may_send, security_socket_create, security_socket_post_create, security_socket_socketpair, security_socket_bind, security_socket_connect, security_socket_listen, security_socket_accept, security_socket_sendmsg, security_socket_recvmsg, security_socket_getsockname, security_socket_getpeername, security_socket_getsockopt, security_socket_setsockopt, security_socket_shutdown, security_sock_rcv_skb, security_socket_getpeersec_stream, security_socket_getpeersec_dgram, lsm_sock_alloc, security_sk_alloc, security_sk_free, security_sk_clone, security_sk_classify_flow, security_req_classify_flow, security_sock_graft, security_inet_conn_request, security_inet_conn_established, security_secmark_relabel_packet, security_secmark_refcount_inc, security_secmark_refcount_dec, security_tun_dev_alloc_security, security_tun_dev_free_security, security_tun_dev_create, security_tun_dev_attach_queue, security_tun_dev_attach, security_tun_dev_open, security_sctp_assoc_request, security_sctp_bind_connect, security_sctp_sk_clone, security_sctp_assoc_established, security_mptcp_add_subflow, security_unix_find, security_ib_pkey_access, security_ib_endport_manage_subnet, security_ib_alloc_security, security_ib_free_security, security_xfrm_policy_alloc, security_xfrm_policy_clone, security_xfrm_policy_free, security_xfrm_policy_delete, security_xfrm_state_alloc, security_xfrm_state_alloc_acquire, security_xfrm_state_delete, security_xfrm_state_free, security_xfrm_policy_lookup, security_xfrm_state_pol_flow_match, security_xfrm_decode_session, security_key_alloc, security_key_free, security_key_permission, security_key_getsecurity, security_key_post_create_or_update, security_audit_rule_init, security_audit_rule_known, security_audit_rule_free, security_audit_rule_match, security_bpf, security_bpf_map, security_bpf_prog, security_bpf_map_create, security_bpf_prog_load, security_bpf_token_create, security_bpf_token_cmd, security_bpf_token_capable, security_bpf_map_free, security_bpf_prog_free, security_bpf_token_free, security_locked_down, security_bdev_alloc, security_bdev_free, security_bdev_setintegrity, security_perf_event_open, security_perf_event_alloc, security_perf_event_free, security_perf_event_read, security_perf_event_write, security_uring_override_creds, security_uring_sqpoll, security_uring_cmd, security_uring_allowed, security_initramfs_populated
π fr fr that list is a whole squad. tag yourself, i'm security_locked_down(9).
<div align="center">π π π</div>
and that's the page!! muah π this one's sourced from ./security and dated October 2026, so go off and clone those socks responsibly. iykyk π§ββοΈπ
π¦ where this page comes from
- nixpkgs unstable: linux-manual 7.3.1
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms