xindex_is_subset(9)

🎀 NAME 🎀

okay bestie, this is xindex_is_subset(9) from the Kernel API Manual, and it is literally the helper for aa_path_link ✨

✨ SYNOPSIS ✨

it's giving very specific C function signature energy:

bool xindex_is_subset (u32 link , u32 target );

🦋 ARGUMENTS 🦋

• link — the link permission set 🫶
• target — the target permission set 👑

💅 DESCRIPTION 💅

so the vibe check here is: test whether the target x permissions are equal to OR a subset of the link x permissions. no cap, that's the whole test 💖

this is done as part of the subset test, where a hardlink must have a subset of permissions that the target has. periodt 🎀

🌈 RETURN 🌈

returns true if it's a subset, else false 💫

🔥 SEE ALSO 🔥

Kernel file ./security/apparmor/file.c is the main-character file, and the related calls are:

• file_audit_cb(9)
• aa_audit_file(9)
• aa_lookup_condperms(9)
• aa_str_perms(9)
• aa_path_perm(9)
• aa_path_link(9)
• aa_file_perm(9)

okay bye bestie, source: ./security/apparmor · version/date: October 2026 · page: xindex_is_subset(9) 🌸💖✨