security_member_sid(9)
β¨ security_member_sid β¨
okay so bestie, this is the Kernel API Manual page for security_member_sid(9) and it's literally the main character of SID computation for member selection π
πΈ NAME πΈ
security_member_sid β Compute the SID for member selection.
β¨ SYNOPSIS β¨
int security_member_sid (u32 ssid , u32 tsid , u16 tclass , u32 *out_sid );
π ARGUMENTS π
ssidβ source security identifiertsidβ target security identifiertclassβ target security classout_sidβ security identifier for selected member
π¦ DESCRIPTION π¦
So here's the vibe: this function computes a SID to use when selecting a member of a polyinstantiated object of class tclass based on a SID pair (ssid, tsid). fr fr that's the whole plot π«Ά
It returns -EINVAL if any of the parameters are invalid, -ENOMEM if insufficient memory is available, or 0 if the SID was computed successfully. Like, no cap β those are the three possible endings, choose your fighter π
π SEE ALSO π
Kernel file ./security/selinux/ss/services.c β and honestly the whole friend group is here, periodt:
security_compute_av(9)security_sid_to_context(9)security_sid_to_context_inval(9)security_context_to_sid(9)security_context_to_sid_default(9)security_transition_sid(9)security_change_sid(9)services_convert_context(9)security_load_policy(9)ocontext_to_sid(9)security_port_sid(9)security_ib_pkey_sid(9)security_ib_endport_sid(9)security_netif_sid(9)security_node_sid(9)__security_genfs_sid(9)security_genfs_sid(9)security_fs_use(9)security_net_peersid_resolve(9)security_policycap_supported(9)security_netlbl_cache_add(9)security_netlbl_secattr_to_sid(9)security_netlbl_sid_to_secattr(9)__security_read_policy(9)security_read_policy(9)security_read_state_kernel(9)
π and that's the whole page bestie, iykyk. this iconic little entry lives at ./security/selinux/ss and it's dated October 2026 β so yeah, she's from the future, slay πβ¨
π¦ where this page comes from
- nixpkgs unstable: linux-manual 7.3.1
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms