tomoyo_update_policy(9)

📦 version 7.3.1, in nixpkgs unstable

💖 tomoyo_update_policy(9) — like, the glow-up era of the Kernel API Manual ✨

okay so bestie, buckle up 🎀 this one's from the Kernel API Manual and it's literally all about updating an entry for exception policy. short page, yes, but every single crumb matters, so let's not skip a thing 💅

🌸 NAME 🌸

tomoyo_update_policy — update an entry for exception policy, no cap 💫

✨ SYNOPSIS ✨

int tomoyo_update_policy (struct tomoyo_acl_head *new_entry , const int
size , struct tomoyo_acl_param *param , bool (*check_duplicate)(const
struct tomoyo_acl_head *, const struct tomoyo_acl_head *) );

like, that's the whole signature, she's a little long but she ate 🫶 keep it exactly as-is, okay?

🦋 ARGUMENTS 🦋

  • new_entry — pointer to "struct tomoyo_acl_info". yes, the quotes are part of the lore 🙈
  • size — the size of new_entry, measured in bytes 📏
  • param — pointer to "struct tomoyo_acl_param" 💜
  • check_duplicate — a callback function whose whole job is finding duplicated entries 👑 (iconic behaviour, honestly)

💀 DESCRIPTION 💀

So here's the vibe check: it returns 0 on success, and a negative value otherwise 😭 that's it, that's the return contract, fr fr.

Also — and this is the important bit — the caller holds tomoyo_read_lock 🔥 like, that's a given going in, not something this function does for you. noted. 💅

no extra lore was provided beyond this, so I'm not gonna invent any, bestie 🧚 that's the whole description, periodt.

🌈 SEE ALSO 🌈

like a whole friend group, honestly 🫶 all from the Kernel file ./security/tomoyo/domain.c:

and that's the page!! 💖✨ little sign-off for you: this one lives in ./security/tomoyo and it's dated October 2026 🎀 so yes, future-coded queen behavior. go forth and update those policy entries, bestie 🦋💜

📦 where this page comes from