security_sctp_sk_clone(9)

📦 version 7.3.1, in nixpkgs unstable

💖 security_sctp_sk_clone(9) — Kernel API Manual, section 9 💖

okay bestie, welcome to the kernel API manual, section 9. this page is all about cloning a SCTP sock's LSM state. it's niche, it's iconic, it's giving security-hook main character energy. 💅

🌸 NAME 🌸

security_sctp_sk_clone — Clone a SCTP sock's LSM state

✨ SYNOPSIS ✨

void security_sctp_sk_clone (struct sctp_association *asoc , struct sock *sk , struct sock *newsk );

🎀 ARGUMENTS 🎀

  • asoc — the SCTP association. yes, the whole association, not just a vibe. 🫶
  • sk — the original sock. the one you're cloning from, bestie.
  • newsk — the target sock. the fresh new sock getting the cloned LSM state. ✨

💅 DESCRIPTION 💅

So this hook gets called whenever a new socket is created by accept(2) — that's the TCP-style socket, iykyk — or when a socket gets 'peeled off', like when userspace calls sctp_peeloff(3). Basically it's the moment where the LSM state gets cloned over to the new sock. literally the security hook doing a little copy-paste with main character energy. no cap. 💅✨

👑 SEE ALSO 👑

Kernel file ./security/security.c — and the whole extended fam, fr fr:

that's literally the whole SEE ALSO squad, bestie. I didn't skip a single one. 💀✨

Source: ./security · October 2026 · that's the tea, no cap. stay sliving, and may your LSM state always clone correctly. 🫶💖🎀

📦 where this page comes from