trace_landlo...scope_signal(9)

✨ NAME ✨

okay bestie, we're in the Kernel API Manual, section 9, and the header lowkey truncates to trace_landlo...scope_signal(9). the full name is trace_landlock_deny_scope_signal, and the NAME line says: Signal delivery denied by LANDLOCK_SCOPE_SIGNAL. that's the whole page's main character energy. 💅

🛠️ SYNOPSIS 🛠️

the signature, verbatim, no edits, no cap:

void trace_landlock_deny_scope_signal (const struct landlock_hierarchy *hierarchy , bool same_exec , bool logged , u64 target_domain_id , const struct task_struct *target , int signal );

💬 ARGUMENTS 💬

okay here's the cast, and every single detail matters:

• hierarchy — the denying domain's hierarchy node, and it is never NULL; its id is the domain field. it always shows up, periodt. 💖
• same_exec — whether the policy subject entered the denying domain itself. yes/no energy, but make it precise. 🦋
• logged — the domain's audit-logging decision for this denial. basically the "did we log this?" decision. 🌸
• target_domain_id — the target's Landlock domain ID, or 0 if the target is unsandboxed. zero is doing real work here, bestie. ⭐
• target — the task the signal was aimed at, and it is never NULL. target_pid is the init-namespace TGID (like audit's opid). iconic. 👑
• signal — the signal selected by the denied check. 0 is a permission probe, not an absent value. do not read zero as "no signal," fr fr. 😭

🌸 DESCRIPTION 🌸

Emitted when a Landlock domain denies signal delivery to a scoped-out target. that's the event, that's the vibe. 💅

🔗 SEE ALSO 🔗

go read these too, bestie — the whole Landlock trace-event family is here:

• Kernel file ./include/trace/events/landlock.h — the kernel file, iykyk. 🧚
• Landlock trace events(9) — the big sibling page. 🌈
• trace_landlock_create_ruleset(9)
• trace_landlock_free_ruleset(9)
• trace_landlock_add_rule_path_beneath(9)
• trace_landlock_add_rule_net_port(9)
• trace_landlock_create_domain(9)
• trace_landlock_enforce_domain(9)
• trace_landlock_free_domain(9)
• trace_landlock_check_rule_inode(9)
• trace_landlock_check_rule_net_port(9)
• trace_landlock_deny_access_fs(9)
• trace_landlock_deny_access_net(9)
• trace_landlock_deny_ptrace(9)
• trace_landlock_deny_scope_abstract_unix_socket(9)

okay that's the whole page bestie 💅 — source/version: ./include/trace/events, date: October 2026, and the footer's truncated title is trace_landlo...scope_signal(9). periodt 🫶