STRUCT LANDLOCK_RULES(9)

💖 struct landlock_rules(9) — from the Kernel API Manual, bestie 💖

okay so this is a page from the Kernel API Manual, and it's literally all about struct landlock_rules — aka the red-black tree storage situation for Landlock rules. iykyk 🌳✨

---

🌸 NAME 🌸

struct landlock_rules — the red-black tree storage for Landlock rules, no cap. they hold the trees, that's the whole vibe 🫶

---

🎀 SYNOPSIS 🎀

here's the struct verbatim, don't touch a single character bestie:

struct landlock_rules {
    struct rb_root root_inode;
  #if IS_ENABLED(CONFIG_INET);
    struct rb_root root_net_port;
  #endif ;
    u32 num_rules;
 };

---

🦋 Members 🦋

• root_inode — root of a red-black tree that's holding struct landlock_rule nodes with an inode object. and listen: it's immutable for domains. like, not changing. periodt 🔒
• root_net_port — root of a red-black tree holding struct landlock_rule nodes with network port. also immutable for domains. same energy 💅
• num_rules — the number of non-overlapping rules in this tree storage (i.e. not for the same object). it's giving "count carefully" 📊

---

✨ Description ✨

so what does this thing actually do? it holds the rule trees that are shared by both rulesets and domains. that's it, that's the whole job — main character energy honestly 👑

---

🌈 SEE ALSO 🌈

go look at the kernel file ./security/landlock/ruleset.h, plus all these iconic friends:

• struct landlock_layer(9)
• union landlock_key(9)
• enum landlock_key_type(9)
• struct landlock_id(9)
• struct landlock_rule(9)
• struct landlock_ruleset(9)
• landlock_get_rule_root(9)

---

🧚 source lives at ./security/landlock, and this page is dated October 2026. mwah, go read the other landlock pages bestie 💜🎀

struct landlock_rules(9) — that's a wrap, slay 🌸