selinux_audit_rule_known(9)

💖 NAME 💖

okay so bestie, welcome to the selinux_audit_rule_known(9) page from the Kernel API Manual 🫶✨. This one is literally a tiny vibe check: selinux_audit_rule_known checks to see if a rule contains selinux fields 👑

✨ SYNOPSIS ✨

int selinux_audit_rule_known (struct audit_krule *rule );

🎀 ARGUMENTS 🎀

• rule — the rule to be checked 💅. Returns 1 if there are selinux fields specified in the rule, and 0 otherwise. no cap 🫶

🌈 SEE ALSO 🌈

• Kernel file ./security/selinux/include/audit.h 🦋
• selinux_audit_rule_avc_callback(9)
• selinux_audit_rule_init(9)
• selinux_audit_rule_free(9)
• selinux_audit_rule_match(9)

that's the whole page, bestie 💖 — source/version check: it lives under ./security/selinux/include, dated October 2026, and it's the selinux_audit_rule_known(9) page in the Kernel API Manual. periodt ✨💅