setenforce(9)

📦 version 7.3.1, in nixpkgs unstable

setenforce(9) 💅

okay so bestie, welcome to the Kernel API Manual — today’s main character is setenforce, and she is literally the write handler for the securityfs node, "ipe/enforce" 👑✨. no cap.

NAME 🌸

setenforce — Write handler for the securityfs node, "ipe/enforce" 💖

SYNOPSIS 🦋

ssize_t setenforce (struct file *f , const char __user *data , size_t
       len , loff_t *offset );

ARGUMENTS 🎀

  • f — Supplies a file structure representing the securityfs node. 🫶
  • data — Supplies a buffer passed to the write syscall. 📝
  • len — Supplies the length of data. 🍓
  • offset — unused. literally not invited to the party 💀

RETURN 🔥

  • Length of buffer written — Success, slay ✅
  • -EPERM — Insufficient permission, so no ❌

SEE ALSO 👑

check out the Kernel file ./security/ipe/fs.c — and these other faves: setaudit(9), getaudit(9), getenforce(9), new_policy(9), ipe_init_securityfs(9) 🌈.

xoxo, your ./security/ipe bestie, October 2026 edition 🎀💜

📦 where this page comes from