tomoyo_poll_log(9)

💖 tomoyo_poll_log(9) 💖

okay so this is from the Kernel API Manual bestie, and it's literally about waiting on an audit log. yes we're in kernel land, put your hair up, we're doing this 🎀

---

✨ NAME ✨

tomoyo_poll_log — bestie's whole job is to wait for an audit log. that's it. that's the vibe. 💅

---

🌸 SYNOPSIS 🌸

__poll_t tomoyo_poll_log (struct file *file , poll_table *wait );

like look at her. so clean. so iconic. 👑

---

🦋 ARGUMENTS 🦋

• file — a pointer to struct file. yes literally just that. pointer. to a file. mwah 🫶
• wait — a pointer to poll_table. and listen, it may be NULL — so like. don't panic if she's not there. 🙈

---

⭐ DESCRIPTION ⭐

so when it's ready to read an audit log, this function returns EPOLLIN | EPOLLRDNORM. that's the whole thing. that's the moment. when the log's ready to be read, she says so, and the return value is EPOLLIN | EPOLLRDNORM. periodt. 🔥

no cap, that's the entire description — it's short, it's sweet, it's giving minimal-effort-maximum-slaps 💀

---

💜 SEE ALSO 💜

the kernel file ./security/tomoyo/audit.c is right there, and honestly the whole friend group is required reading:

• tomoyo_print_bprm(9)
• tomoyo_filetype(9)
• tomoyo_print_header(9)
• tomoyo_init_log(9)
• tomoyo_get_audit(9)
• tomoyo_write_log2(9)
• tomoyo_write_log(9)
• tomoyo_read_log(9)

go read them. all of them. iykyk 🧚

---

k bye bestie, this page came from the source ./security/tomoyo, dated October 2026, and yeah the footer says tomoyo_poll_log(9) again because she's consistent like that 💖✨🌈