security_xfrm_policy_clone(9)

📦 version 7.3.1, in nixpkgs unstable

💅 security_xfrm_policy_clone — Kernel API Manual, but make it group chat

okay so this is from the Kernel API Manual, section 9, and it's about cloning the LSM state of an xfrm policy — sounds intimidating, is actually tiny. no cap. 🦋

🎀 NAME

security_xfrm_policy_clone — clone xfrm policy LSM state ✨

✨ SYNOPSIS

int security_xfrm_policy_clone (struct xfrm_sec_ctx *old_ctx , struct
       xfrm_sec_ctx **new_ctxp );

🫶 ARGUMENTS

  • old_ctx — the xfrm security context you already have, aka the source vibe 🧚 it's a struct xfrm_sec_ctx *.
  • new_ctxp — the target xfrm security context, a struct xfrm_sec_ctx ** — note the double star bestie, you're handing over a pointer to a pointer so the shiny new thing can land in there 💫

💖 DESCRIPTION

So basically: this allocates a security structure in new_ctxp, and that fresh structure contains all the information from the old_ctx structure. that's the whole plot. no plot twists. 🌸

it's giving "copy the vibe, keep the facts." 💅

🔥 RETURN

returns 0 if the operation was successful. that's it, that's the return value 🎀

🌈 SEE ALSO

so there is a lot here, and by a lot I mean the entire LSM universe showed up to the party 👑 — starting with the kernel file ./security/security.c:

like I said. the whole guest list. ate. 💀🔥

fr fr bestie, that SEE ALSO list is longer than my screen time report — but every single one is there, iykyk 🙈

and that's the page! brought to you by the fine folks in ./security, dated October 2026 — security_xfrm_policy_clone(9), Kernel API Manual, signing off 🫶🎀✨

📦 where this page comes from