selinux_conn_sid(9)

📦 version 7.3.1, in nixpkgs unstable

💖 selinux_conn_sid(9) 💖

okay bestie, welcome to the Kernel API Manual ✨ we're doing selinux_conn_sid today and honestly? she's giving "quiet little helper that does exactly one thing and does it well" energy. lowkey iconic. 🎀

✨ NAME ✨

selinux_conn_sid — determine the child socket label for a connection 🧚

like, you've got a socket, you've got a packet, and you want to know what label the brand-new baby connection socket should get. that's the whole vibe. 💅

🦋 SYNOPSIS 🦋

int selinux_conn_sid (u32 sk_sid , u32 skb_sid , u32 *conn_sid );

three args, one int back, no cap. 🫶

🌸 ARGUMENTS 🌸

  • sk_sid — the parent socket's SID 👑 the main character, the one who's spawning the connection
  • skb_sid — the packet's SID 📦 the little messenger that showed up with info
  • conn_sid — the resulting connection SID 🌈 this is where the answer goes, she's an out-param fr fr

⭐ DESCRIPTION ⭐

okay so here's the tea ☕

If skb_sid is valid, then the user:role:type information from sk_sid gets combined with the MLS information from skb_sid in order to create conn_sid. it's a little mashup, a lil collab, the two SIDs holding hands and making a third one 🫱🏻‍🫲🏽✨

If skb_sid is not valid, then conn_sid is simply a copy of sk_sid. no mixing, no drama, just a straight-up copy-paste situation 💀

returns zero on success, negative values on failure. so like, 0 = slay, < 0 = something went wrong, go check it 😭

🔥 SEE ALSO 🔥

the kernel file is ./security/selinux/hooks.c, and bestie there are so many siblings to meet:

that's the whole group chat, go say hi 👋💜

mwah 💋 that's the page! brought to you by ./security/selinux, dated October 2026, and yeah the page itself is literally named selinux_conn_sid(9) — she said "I'm the title AND the footer, consistency queen" 👑✨

📦 where this page comes from