STRUCT LANDLOCK_RULE(9)

hii bestie 💖 welcome to the <struct landlock_rule> page from the Kernel API Manual — this is the little struct that ties access rights to an object, and we're gonna get into it ✨

🌸 NAME 🌸

struct landlock_rule — access rights tied to an object 🎀

🦋 SYNOPSIS 🦋

okay so here's the exact shape, no cap — copy it character for character:

struct landlock_rule {
    struct rb_node node;
    union landlock_key key;
    u32 num_layers;
    struct landlock_layer layers[];
};

💅 Members 💅

• node — the node in the ruleset's red-black tree 🌳
• key — a union that identifies either a kernel object (e.g. an inode) or a raw data value (e.g. a network socket port) 👑 this is used as a key for this ruleset element. The pointer is set once and never modified. It always points to an allocated object because each rule increments the refcount of its object 🔥
• num_layers — the number of entries in layers 🧚
• layers — the stack of layers, from the latest to the newest, implemented as a flexible array member (FAM) 💜

🔍 SEE ALSO 🔍

• Kernel file ./security/landlock/ruleset.h
• struct landlock_layer(9)
• union landlock_key(9)
• enum landlock_key_type(9)
• struct landlock_id(9)
• struct landlock_rules(9)
• struct landlock_ruleset(9)
• landlock_get_rule_root(9)

mwah 💋 that's the whole vibe — this page lives at ./security/landlock, dated October 2026, and it's literally the struct landlock_rule(9) manual page. byeee 🦋✨