selinux_netlbl_sock_rcv_skb(9)

📦 version 7.3.1, in nixpkgs unstable

💅 selinux_netlbl_sock_rcv_skb(9) ✨

okay so bestie, welcome to the Kernel API Manual — yes we're reading kernel docs together, this is our bonding era 🫶. Today's main character is selinux_netlbl_sock_rcv_skb, and honestly? She's doing a lot of quiet little work so your inbound packets get checked properly. Let's get into it.

🌸 NAME 🌸

selinux_netlbl_sock_rcv_skb — literally does an inbound access check using NetLabel 💖

🎀 SYNOPSIS 🎀

int selinux_netlbl_sock_rcv_skb (struct sk_security_struct *sksec ,
struct sk_buff *skb , u16 family , struct common_audit_data *ad );

✨ ARGUMENTS ✨

  • sksec — the sock's sk_security_struct, i.e. the little security struct attached to the socket 👑
  • skb — the packet itself, the whole reason we're here 📦
  • family — the protocol family 🌈
  • ad — the audit data 📝

🦋 DESCRIPTION 🦋

So what she actually does: she fetches the NetLabel security attributes off of skb and then performs an access check against the receiving socket. That's the whole vibe check 🔥.

Returns zero on success, and negative values on error. No cap. 💀

💜 SEE ALSO 💜

like, the whole netlabel friend group showed up for this one 😭💕

ngl this one's short but she's important — she's the inbound check, so treat her right 🍓

bye bestie, mwah 💋 — this page lives in ./security/selinux, dated October 2026, and it's literally called selinux_netlbl_sock_rcv_skb(9). slay, go read the kernel 🎀✨💅

📦 where this page comes from