security_xfr...l_flow_match(9)

📦 version 7.3.1, in nixpkgs unstable

hey bestie, welcome to the Kernel API Manual 🌸 — section 9, kernel-internals territory, so grab a matcha and let's get into it. we're looking at security_xfrm_state_pol_flow_match, and ngl it's a short one but she's important 💅

✨ NAME ✨

security_xfrm_state_pol_flow_match — Check for a xfrm match 🦋

that's it. that's the whole name section. she's lowkey mysterious.

🌈 SYNOPSIS 🌈

okay so here's the whole signature, bestie, copy it exactly, don't @ me:

int security_xfrm_state_pol_flow_match (struct xfrm_state *x , struct xfrm_policy *xp , const struct flowi_common *flic );

it takes three pointers and it returns an int, and honestly that's the entire vibe check of this function 🎀

🎀 ARGUMENTS 🎀

three little besties walk into a function:

  • x — the xfrm state we're trying to match against 👑
  • xp — the xfrm policy we're checking for a match 🔍
  • flic — the flow we're checking for a match ✨

like, that's the assignment. triple match energy.

💖 DESCRIPTION 💖

so the actual story: it checks xp and flic for a match with x. that's the whole plot, fr fr 🫶

no cap, that's literally the entire description. short and iconic.

⭐ RETURN ⭐

Returns 1 if there is a match. 🎉

(note: it says 1 if there's a match, and that's all the docs give us, so don't go inventing what it returns otherwise, bestie 😭)

🦋 SEE ALSO 🦋

Kernel file ./security/security.c — that's the neighborhood this function lives in 🏡

then there's a whole friend group of LSM and security functions, and I'm listing every single one of them because we don't do half-assed lists around here 💅

like, that's the whole extended friend group. iykyk 💀

okay that's the page, bestie 🫶 this one came from the ./security corner of the tree, and the manual's dated October 2026 — go forth and match some xfrm stuff, you've got this periodt 💜

📦 where this page comes from