smack_privileged_cred(9)

🌸 NAME 🌸

okay bestie, welcome to the Kernel API Manual page for smack_privileged_cred(9) — are all privilege requirements met by cred? That's literally the whole question, and it's giving quick security vibe check energy 💅✨

✨ SYNOPSIS ✨

bool smack_privileged_cred (int cap , const struct cred *cred );

🎀 ARGUMENTS 🎀

• cap — the requested capability. Not the slang kind of "cap," bestie — this is the actual capability argument 💀
• cred — the credential to use. This is the cred we're checking, periodt 🫶

💖 DESCRIPTION 💖

So here's the tea: this checks whether the task is privileged and whether it's allowed to be privileged by the onlycap rule. It's lowkey the whole security vibe check, no cap 🌈

It returns true if the task is allowed to be privileged, and false if it's not. Literally that simple, and the boolean is the main character 👑

🔥 SEE ALSO 🔥

Kernel file ./security/smack/smack_access.c — go read it if you want the full lore, bestie 📖✨

• smk_access_entry(9)
• smk_access(9)
• smk_tskacc(9)
• smk_curacc(9)
• smack_str_from_perm(9)
• smack_log_callback(9)
• smack_log(9)
• smk_insert_entry(9)
• smk_find_entry(9)
• smk_parse_label_len(9)
• smk_parse_smack(9)
• smk_netlbl_mls(9)
• smack_populate_secattr(9)
• smk_import_entry(9)
• smk_import_valid_label(9)
• smack_from_secid(9)
• smack_privileged(9)

Mwah 💋 this page's source/version is ./security/smack, dated October 2026, and it's smack_privileged_cred(9) — bye bestie, slay responsibly 🎀🦋