trace_landl...eate_ruleset(9)

💜 trace_landl...eate_ruleset(9)

okay bestie, welcome to the Kernel API Manual ✨ this one's a trace event page and it's honestly so chill — let's get into it 💅

---

🌸 NAME 🌸

trace_landlock_create_ruleset — new ruleset created, periodt 🎀

---

✨ SYNOPSIS ✨

void trace_landlock_create_ruleset (const struct landlock_ruleset
*ruleset );

---

🦋 ARGUMENTS 🦋

• ruleset — the newly created ruleset, and ngl it is never NULL (guard rails, we love to see it 🫶). At this point it hasn't been shared via an fd yet, so no lock is needed — lowkey the calmest moment this struct will ever have 💀

---

🔥 DESCRIPTION 🔥

So this event is emitted by sys_landlock_create_ruleset while the brand-new ruleset is still private to the calling thread 👑 it happens before the file descriptor gets installed, which means it literally cannot race a concurrent close(2) 😭🙈 slay.

It's balanced by a matching landlock_free_ruleset event — they're a matching set, iykyk 💖

---

🌈 SEE ALSO 🌈

• Kernel file ./include/trace/events/landlock.h Landlock trace events(9)
• trace_landlock_free_ruleset(9)
• trace_landlock_add_rule_path_beneath(9)
• trace_landlock_add_rule_net_port(9)
• trace_landlock_create_domain(9)
• trace_landlock_enforce_domain(9)
• trace_landlock_free_domain(9)
• trace_landlock_check_rule_inode(9)
• trace_landlock_check_rule_net_port(9)
• trace_landlock_deny_access_fs(9)
• trace_landlock_deny_access_net(9)
• trace_landlock_deny_ptrace(9)
• trace_landlock_deny_scope_signal(9)
• trace_landlock_deny_scope_abstract_unix_socket(9)

---

💌 that's the whole page babes, go forth and trace responsibly 🧚‍♀️

kisses, this was ./include/trace/events — October 2026 edition 🍓⭐