smk_tskacc(9)

💖 NAME 💖

okay bestie, meet smk_tskacc(9) from the Kernel API Manual — it's the function whose whole job is to determine if a task has a specific access to an object. periodt. ✨

✨ SYNOPSIS ✨

       int smk_tskacc (struct task_smack *tsp , struct smack_known *obj_known ,
       u32 mode , struct smk_audit_info *a );

🎀 ARGUMENTS 🎀

• tsp — a pointer to the subject's task. literally the task we're checking, bestie 🫶
• obj_known — a pointer to the object's label entry. this is the object's label situation ✨
• mode — the access requested, in "MAY" format. yes, "MAY" not "maybe" 😭
• a — common audit data. the audit info buddy 🎀

🦋 DESCRIPTION 🦋

So here's the tea: this function checks the subject task's label/object label pair in the access rule list and returns 0 if the access is permitted, non zero otherwise. 💅

And yes, it allows that the task may have the capability to override the rules. so the rules aren't always the final boss, iykyk 👑

🌈 SEE ALSO 🌈

the whole friend group, no cap:

• Kernel file ./security/smack/smack_access.c
• smk_access_entry(9)
• smk_access(9)
• smk_curacc(9)
• smack_str_from_perm(9)
• smack_log_callback(9)
• smack_log(9)
• smk_insert_entry(9)
• smk_find_entry(9)
• smk_parse_label_len(9)
• smk_parse_smack(9)
• smk_netlbl_mls(9)
• smack_populate_secattr(9)
• smk_import_entry(9)
• smk_import_valid_label(9)
• smack_from_secid(9)
• smack_privileged_cred(9)
• smack_privileged(9)

mwah 💋 — source/version: ./security/smack, date: October 2026, page: smk_tskacc(9). that's the whole footer, folded into a cute lil send-off 🎀✨