trace_landlo...ule_net_port(9)
π trace_landlock_add_rule_net_port β a network-port rule just landed in a ruleset π
okay so this one's from the Kernel API Manual (that's the manual name, bestie, section 9 β kernel internals, iykyk), and it's literally a tracepoint page. It's giving "backstage pass to the Landlock trace events" energy. Let's go β¨
πΈ SYNOPSIS πΈ
void trace_landlock_add_rule_net_port (const struct landlock_ruleset
*ruleset , u32 flags , u64 access_rights , u64 port );
that's the whole vibe β a void function, four args, no return value, no notes. slay π
π¦ ARGUMENTS π¦
rulesetβ the source ruleset, and she is neverNULL. fr fr, never. πflagsβ the complete, validatedlandlock_add_rule_flagsvalue that this successful call supplied. heads up tho: this is not the rule's accumulated quiet state, don't get it twisted πaccess_rightsβ the canonical per-call access mask that got passed tolandlock_insert_ruleafter normalization. and ngl, it's not the rawsys_landlock_add_ruleargument, and it's not the accumulated rule either β it's the post-normalization version, periodt β¨portβ the network port in host endianness, forwarded directly fromlandlock_net_port_attr.port. straight from the source, no detours π«Ά
π DESCRIPTION π
so this tracepoint gets emitted by sys_landlock_add_rule under the modified ruleset's lock π β which is lowkey the whole point: the reported ruleset is a stable snapshot that no concurrent writer can change. main character stability energy, honestly π
the way that lock holds it down so nothing else can sneak in and rewrite the story? iconic. π
π SEE ALSO π
- Kernel file
./include/trace/events/landlock.h - Landlock trace events(9)
trace_landlock_create_ruleset(9)trace_landlock_free_ruleset(9)trace_landlock_add_rule_path_beneath(9)trace_landlock_create_domain(9)trace_landlock_enforce_domain(9)trace_landlock_free_domain(9)trace_landlock_check_rule_inode(9)trace_landlock_check_rule_net_port(9)trace_landlock_deny_access_fs(9)trace_landlock_deny_access_net(9)trace_landlock_deny_ptrace(9)trace_landlock_deny_scope_signal(9)trace_landlock_deny_scope_abstract_unix_socket(9)
the whole squad is here, we love a full friend group π
and that's the page!! π¦ this little cutie lives at ./include/trace/events and the version/date footer says October 2026 β so yeah, mark your calendar bestie, she's from the future πβ¨ see u in the next manpage, mwah π
π¦ where this page comes from
- nixpkgs unstable: linux-manual 7.3.1
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms