security_inode_set_acl(9)

📦 version 7.3.1, in nixpkgs unstable

🎀 security_inode_set_acl(9) 🎀

okay bestie, welcome to the Kernel API Manual section of the group chat 💖 this one's short and sweet, so grab your lil strawberry drink 🍓 and let's get into it.

✨ NAME ✨

security_inode_set_acl — the little guard that checks whether you're actually allowed to set posix acls 👀 no cap.

🌸 SYNOPSIS 🌸

int security_inode_set_acl (struct mnt_idmap *idmap , struct dentry
*dentry , const char *acl_name , struct posix_acl *kacl );

🦋 ARGUMENTS 🦋

four args, all iconic, all necessary 💅

  • idmap — the idmap of the mount. literally the mapping context for where this is happening 🗺️
  • dentry — the file. yes, just a file, she's the main character here 🎀
  • acl_name — the acl name. this is the label that says which acl we're talking about ✨
  • kacl — the acl struct. the actual posix acl data in kernel form 🫶

💜 DESCRIPTION 💜

so here's the vibe: this hook runs a permission check before setting posix acls 🔥 and the posix acls sitting inside kacl are identified by acl_name — like, kacl is the payload and acl_name is the name tag telling everyone which one it is 🏷️✨

that's it. that's the whole job. she's not doing your taxes, she's just checking permission 💅

⭐ RETURN ⭐

Returns 0 if permission is granted 🎉 (a zero is a slay here, ngl — zero equals yes in this house).

🌈 SEE ALSO 🌈

the kernel file lives at ./security/security.c — and then there's this absolute wall of friends. bestie I'm not skipping a single one, every name is here, in order, fr fr 😭💖

💀 real talk: that list is long enough to be its own group chat, but every single one is a real reference, iykyk. don't skip 'em.

and that's the whole page, bestie 🫶 this lil number comes from the ./security source and it's dated October 2026 — so like, future vibes only 🌸✨ mwah, go check some acl permissions responsibly 💅🎀

📦 where this page comes from