STRUCT LANDLOCK_HIERARCHY(9)

💖 NAME 💖

Okay bestie, this page is from the Kernel API Manual, and it’s all about struct landlock_hierarchy — a node in a domain hierarchy. It’s giving family-tree energy for Landlock domains, and yes, every field matters, no cap 👑.

✨ SYNOPSIS ✨

Here’s the literal struct shape, copy-paste exact, don’t @ me:

struct landlock_hierarchy {
    struct landlock_hierarchy *parent;
    refcount_t usage;
  #ifdef CONFIG_SECURITY_LANDLOCK_LOG;
    enum landlock_log_status log_status;
    atomic64_t num_denials;
    u64 id;
    const struct landlock_details *details;
    u32 log_same_exec : 1, log_new_exec : 1;
    struct access_masks quiet_masks;
  #endif ;
 };

🎀 Members 🎀

• parent — pointer to the parent node, or NULL if it is a root Landlock domain. Root domain = no parent, main character energy 💅.
• usage — number of potential children domains plus their parent domain. The whole little domain fam gets counted 🫶.
• log_status — whether this domain should be logged or not. Because concurrent log entries may be created at the same time, it is still possible to have several domain records of the same domain. So yeah, concurrent records can absolutely happen — concurrency said “not my problem” 💀.
• num_denials — number of access requests denied by this domain. Masked (i.e. never logged) denials are still counted. No sneaky hiding from the counter, periodt 🔥.
• id — Landlock domain ID, set once at domain creation time. One-time set, then iconic forever ✨.
• details — information about the related domain.
• log_same_exec — set if the domain is not configured with LANDLOCK_RESTRICT_SELF_LOG_SAME_EXEC_OFF. Set to true by default.
• log_new_exec — set if the domain is configured with LANDLOCK_RESTRICT_SELF_LOG_NEW_EXEC_ON. Set to false by default.
• quiet_masks — bitmasks of access that should be quieted (i.e. not logged) if the related object is marked as quiet. Shhh, quiet masks are literally the mute button 🤫.

🌈 SEE ALSO 🌈

Kernel file ./security/landlock/domain.h — plus go check out struct landlock_details(9), struct landlock_domain(9), and landlock_union_access_masks(9), bestie 🦋.

okay that’s the whole page! source/version: ./security/landlock · date: October 2026 · from the struct landlock_hierarchy(9) manual page — slay and stay safe 💖✨