selinux_net...cket_connect(9)

okay so bestie, we’re looking at selinux_netlbl_socket_connect(9) from the Kernel API Manual, and it’s literally the function for labeling a client-side socket on connect. It’s giving kernel-security main character energy, and we’re gonna read it together. 🫶

🎀 NAME 🎀

selinux_netlbl_socket_connect — Label a client-side socket on connect

✨ SYNOPSIS ✨

int selinux_netlbl_socket_connect (struct sock *sk , struct sockaddr
       *addr );

👑 ARGUMENTS 👑

• sk — the socket to label. That’s the one we’re putting a label on, bestie. 💅
• addr — the destination address. The address we’re working with, no cap. 🌸

💖 DESCRIPTION 💖

Okay so the move here is: attempt to label a connected socket with NetLabel using the given address. That’s it, that’s the vibe. ✨

It returns zero values on success, and negative values on failure. So zero = slay, negative = something went sideways. Periodt. 💀

🦋 SEE ALSO 🦋

Kernel file: ./security/selinux/netlabel.c

• selinux_netlbl_sidlookup_cached(9)
• selinux_netlbl_sock_genattr(9)
• selinux_netlbl_sock_getattr(9)
• selinux_netlbl_cache_invalidate(9)
• selinux_netlbl_err(9)
• selinux_netlbl_sk_security_free(9)
• selinux_netlbl_sk_security_reset(9)
• selinux_netlbl_skbuff_getsid(9)
• selinux_netlbl_skbuff_setsid(9)
• selinux_netlbl_sctp_assoc_request(9)
• selinux_netlbl_inet_conn_request(9)
• selinux_netlbl_inet_csk_clone(9)
• selinux_netlbl_sctp_sk_clone(9)
• selinux_netlbl_socket_post_create(9)
• selinux_netlbl_sock_rcv_skb(9)
• selinux_netlbl_option(9)
• selinux_netlbl_socket_setsockopt(9)
• selinux_netlbl_socket_connect_helper(9)
• selinux_netlbl_socket_connect_locked(9)

that’s the whole page, mwah 💋 — source/version: ./security/selinux, date: October 2026. periodt.