security_net...rsid_resolve(9)

📦 version 7.3.1, in nixpkgs unstable

🌸 security_net...rsid_resolve(9) — the Kernel API Manual, bestie edition 🌸

okay so you found yourself in the Kernel API Manual (yes, the security_net...rsid_resolve(9) one) and honestly? iconic of you. let's get into it 💅

✨ NAME ✨

security_net_peersid_resolve — literally just compares two network peer SIDs and resolves them, that's the whole vibe 🫶

🦋 SYNOPSIS 🦋

int security_net_peersid_resolve (u32 nlbl_sid , u32 nlbl_type , u32
xfrm_sid , u32 *peer_sid );

🎀 ARGUMENTS 🎀

  • nlbl_sid — the NetLabel SID, she's the first one up 💖
  • nlbl_type — the NetLabel labeling protocol type, aka her whole flavor
  • xfrm_sid — the XFRM SID, the other half of this little meet-cute
  • peer_sid — the network peer sid, our output girlie ✨

💜 DESCRIPTION 💜

so the whole plot: you compare the nlbl_sid and xfrm_sid values, and if those two SIDs can be resolved into a single SID, that merged SID gets handed back to you through peer_sid and the function returns zero. slay. 🎉

but if they can't be resolved? then peer_sid gets set to SECSID_NULL and the function returns a negative value. it's giving rejection arc 😭

here's the table summarizing the behavior, because we love a visual aid:

  • no peer labels → function return: 0 | sid: SECSID_NULL
  • single peer label → function return: 0 | sid: <peer_label>
  • multiple, consistent labels → function return: 0 | sid: <peer_label>
  • multiple, inconsistent labels → function return: -<errno> | sid: SECSID_NULL

(the columns are function return and sid, for the record 👑)

🔥 SEE ALSO 🔥

kernel file ./security/selinux/ss/services.c, plus the whole friend group:

okay that's the whole page, no cap 💀 this lil gem lives in ./security/selinux/ss, dated October 2026, and it's filed under security_net...rsid_resolve(9) — go forth and resolve those peers, bestie 🌈⭐💅

📦 where this page comes from