STRUCT LANDLOCK_DETAILS(9)

πŸ“¦ version 7.3.1, in nixpkgs unstable

πŸ’… struct landlock_details(9) πŸ’…

okay so bestie, welcome to the Kernel API Manual entry for struct landlock_details β€” this one's a whole vibe, it's literally just a little receipt of who created a domain. periodt.


✨ NAME ✨

struct landlock_details β€” the domain's creation information, like a birth certificate but for a Landlock domain πŸŽ€


🌸 SYNOPSIS 🌸

no cap, here's the whole thing, copy it exactly:

struct landlock_details {
    struct pid *pid;
    uid_t uid;
    char comm[TASK_COMM_LEN];
    char exe_path[];
 };

πŸ¦‹ Members πŸ¦‹

  • pid β€” the PID of the task that initially restricted itself, and it still identifies that same task. Keeping a reference to this PID means it will not be recycled. iconic, honestly β€” no zombie PID shenanigans here.
  • uid β€” the UID of the task that initially restricted itself, captured at creation time. 🫢
  • comm β€” the command line of the task that initially restricted itself, at creation time. It's always NULL terminated. always. πŸ’―
  • exe_path β€” the executable path of the task that initially restricted itself, at creation time. Also always NULL terminated, and never greater than LANDLOCK_PATH_MAX_SIZE. she has limits and she respects them πŸ’…

🧚 Description 🧚

This thing is rarely accessed β€” mainly when you're logging the first domain's denial. lowkey a special-occasion struct, she doesn't come out for just anything 🌈

The contained pointers are initialized at the domain creation time and never changed again. fr fr, they're set once and then they're forever frozen in time β€” no mutating, no editing, no take-backs. πŸŽ€


πŸ‘‘ SEE ALSO πŸ‘‘

Kernel file ./security/landlock/domain.h, plus these besties:

go read them too, iykyk πŸ’–


that's the whole page bestie, slay β€” this one lives in ./security/landlock and it's dated October 2026. mwah, see u in the kernel πŸ¦‹βœ¨πŸ’œ

πŸ“¦ where this page comes from