STRUCT LANDLOCK_LAYER(9)

🌸 struct landlock_layer(9) — Kernel API Manual 🌸

Okay bestie, welcome to the cute little corner of the kernel docs where we talk about struct landlock_layer 💅 this one is literally access rights for a given layer — no cap.

🎀 NAME 🎀

struct landlock_layer — Access rights for a given layer. That's the whole vibe ✨

🦋 SYNOPSIS 🦋

struct landlock_layer {
    u8 level;
    struct {
      u8 quiet : 1;
    } flags;
    access_mask_t access;
 };

👑 Members 👑

• level — the position of this layer in the layer stack, bestie. It starts from 1 🫶
• flags — the bitfield for special flags attached to this rule 🎀
  • flags.quiet — this one suppresses denial logs for the object covered by this rule in this domain. For filesystem rules, it inherits down the file hierarchy — iykyk 🌈
• access — a bitfield of allowed actions on the kernel object. These are relative to the object type (e.g. LANDLOCK_ACTION_FS_READ) ✨

💜 SEE ALSO 💜

Kernel file ./security/landlock/ruleset.h, plus the whole squad:

• union landlock_key(9)
• enum landlock_key_type(9)
• struct landlock_id(9)
• struct landlock_rule(9)
• struct landlock_rules(9)
• struct landlock_ruleset(9)
• landlock_get_rule_root(9)

Mwah 💋 this page is from ./security/landlock, dated October 2026, and it's literally struct landlock_layer(9) — see you in the group chat 🫶