selinux_peerlbl_enabled(9)

✨ selinux_peerlbl_enabled(9) ✨

hiii bestie 💖 welcome to the selinux_peerlbl_enabled(9) page from the Kernel API Manual. this is literally the vibe check for whether peer labeling is currently enabled, and we're gonna get into it 🎀

🌸 NAME 🌸

selinux_peerlbl_enabled — check to see if peer labeling is currently enabled. that's the whole main character job, no cap 💅

💖 SYNOPSIS 💖

int selinux_peerlbl_enabled (void );

🎀 ARGUMENTS 🎀

• void — no arguments. zero. nada. you are not passing anything in here, periodt 🫶

🦋 DESCRIPTION 🦋

okay so this function checks if NetLabel or labeled IPSEC is enabled. it returns true (1) if any are enabled, or false (0) if neither are enabled. simple enough, right? ✨

and listen 👀 if the always_check_network policy capability is enabled, then peer labeling is always considered enabled. iconic behavior honestly 💅

🔥 SEE ALSO 🔥

• Kernel file ./security/selinux/hooks.c
• selinux_secmark_enabled(9)
• task_avdcache_reset(9)
• task_avdcache_search(9)
• task_avdcache_update(9)
• selinux_inode_permission(9)
• selinux_inode_xattr_skipcap(9)
• selinux_mmap_backing_file(9)
• selinux_skb_peerlbl_sid(9)
• selinux_conn_sid(9)
• selinux_getselfattr(9)
• selinux_uring_override_creds(9)
• selinux_uring_sqpoll(9)
• selinux_uring_cmd(9)
• selinux_uring_allowed(9)

okay that's the whole page bestie 😭💖 the source/version is ./security/selinux, dated October 2026, and yes this is the selinux_peerlbl_enabled(9) manual page — slay and goodbye 🫶✨