selinux_aud...avc_callback(9)

💅 selinux_audit_rule_avc_callback 💅

okay so bestie, welcome to the Kernel API Manual ✨ — yes this is the selinux_aud...avc_callback(9) page, the title got cutely truncated by the terminal, don't worry about it 🎀

---

🌸 NAME 🌸

selinux_audit_rule_avc_callback — the little function that keeps your audit LSM rules updated whenever AVC events happen 🔥

---

✨ SYNOPSIS ✨

int selinux_audit_rule_avc_callback (u32 event );

---

🦋 ARGUMENTS 🦋

• event — the AVC event, like, the whole reason we're here 💫

---

👑 DESCRIPTION 👑

So here's the vibe: you call this and it updates any audit LSM rules based on the AVC event you passed in as event. That's it, that's the job 🫶

Returns 0 on success — slay — and negative values otherwise 😭 (yes, plural, it's giving "anything could go wrong and we're not telling you which," no cap).

---

🌈 SEE ALSO 🌈

• Kernel file ./security/selinux/include/audit.h
• selinux_audit_rule_init(9)
• selinux_audit_rule_free(9)
• selinux_audit_rule_match(9)
• selinux_audit_rule_known(9)

like, go read the rest of the squad, iykyk 💜

---

and that's the whole page bestie 💖 this one lives in ./security/selinux/include and it's dated October 2026 — not me being a selinux_aud...avc_callback(9) girlie in the Kernel API Manual, we ate, periodt 🎀✨🦋