trace_landl...k_rule_inode(9)

💅 trace_landlock_check_rule_inode(9) 💅

okay bestie so this is a page straight out of the Kernel API Manual, section 9 (the kernel-functions girly section, iykyk), and it's all about the trace event trace_landlock_check_rule_inode. yes the header up top truncates it to trace_landl...k_rule_inode(9) bc apparently even manual pages have a character limit 🙈 — but the real full name is right there in the NAME section, slay.

---

✨ NAME ✨

trace_landlock_check_rule_inode — the inode rule that gets evaluated during an access check 🦋

---

🌸 SYNOPSIS 🌸

void trace_landlock_check_rule_inode (const struct landlock_domain
*domain , const struct landlock_rule *rule , u64 access_request , const
struct dentry *dentry );

---

🎀 ARGUMENTS 🎀

• domain — the enforcing domain. she is never NULL, periodt. main character energy, always present ✨
• rule — the matching rule, and it's got per-layer access masks. also never NULL 💅
• access_request — the access mask being evaluated against the rule. and like, plot twist: during rename/link double-checks this is the domain's handled mask 👀
• dentry — the filesystem dentry that's getting checked. never NULL either, we stan a fully-populated argument list 🫶

---

💖 DESCRIPTION 💖

so basically this trace event gets emitted for each rule that matches during a filesystem access check 🔥 like, every single matching rule gets its moment, no gatekeeping.

the grants array is the iconic part — it shows the requested rights that the rule grants at each domain layer 👑 so you can literally see the vibes of the permission at every layer.

if you're sitting there like "bestie how do i even read this," go check Documentation/trace/events-landlock.rst — it explains how to interpret it, no cap 📖

---

🦋 SEE ALSO 🦋

• Kernel file ./include/trace/events/landlock.h Landlock trace events(9)
• trace_landlock_create_ruleset(9)
• trace_landlock_free_ruleset(9)
• trace_landlock_add_rule_path_beneath(9)
• trace_landlock_add_rule_net_port(9)
• trace_landlock_create_domain(9)
• trace_landlock_enforce_domain(9)
• trace_landlock_free_domain(9)
• trace_landlock_check_rule_net_port(9)
• trace_landlock_deny_access_fs(9)
• trace_landlock_deny_access_net(9)
• trace_landlock_deny_ptrace(9)
• trace_landlock_deny_scope_signal(9)
• trace_landlock_deny_scope_abstract_unix_socket(9)

---

and that's the whole page, bestie 🧚💜 this lil icon comes to you from ./include/trace/events, dated October 2026, roll credits 🌈⭐ ngl the kernel documentation team ate with this one 💅🎀