Home
last modified time | relevance | path

Searched refs:krule (Results 1 – 4 of 4) sorted by relevance

/kernel/
Daudit_watch.c190 int audit_to_watch(struct audit_krule *krule, char *path, int len, u32 op) in audit_to_watch() argument
198 krule->listnr != AUDIT_FILTER_EXIT || in audit_to_watch()
200 krule->inode_f || krule->watch || krule->tree) in audit_to_watch()
207 krule->watch = watch; in audit_to_watch()
380 static void audit_add_to_parent(struct audit_krule *krule, in audit_add_to_parent() argument
383 struct audit_watch *w, *watch = krule->watch; in audit_add_to_parent()
398 krule->watch = watch = w; in audit_add_to_parent()
410 list_add(&krule->rlist, &watch->rules); in audit_add_to_parent()
415 int audit_add_watch(struct audit_krule *krule, struct list_head **list) in audit_add_watch() argument
417 struct audit_watch *watch = krule->watch; in audit_add_watch()
[all …]
Dauditfilter.c162 static inline int audit_to_inode(struct audit_krule *krule, in audit_to_inode() argument
165 if (krule->listnr != AUDIT_FILTER_EXIT || in audit_to_inode()
166 krule->inode_f || krule->watch || krule->tree || in audit_to_inode()
170 krule->inode_f = f; in audit_to_inode()
597 static struct audit_rule_data *audit_krule_to_data(struct audit_krule *krule) in audit_krule_to_data() argument
603 data = kmalloc(sizeof(*data) + krule->buflen, GFP_KERNEL); in audit_krule_to_data()
608 data->flags = krule->flags | krule->listnr; in audit_krule_to_data()
609 data->action = krule->action; in audit_krule_to_data()
610 data->field_count = krule->field_count; in audit_krule_to_data()
613 struct audit_field *f = &krule->fields[i]; in audit_krule_to_data()
[all …]
Daudit_fsnotify.c83 struct audit_fsnotify_mark *audit_alloc_mark(struct audit_krule *krule, char *pathname, int len) in audit_alloc_mark() argument
110 audit_mark->rule = krule; in audit_alloc_mark()
150 void audit_remove_mark_rule(struct audit_krule *krule) in audit_remove_mark_rule() argument
152 struct audit_fsnotify_mark *mark = krule->exe; in audit_remove_mark_rule()
Daudit.h273 extern int audit_to_watch(struct audit_krule *krule, char *path, int len, u32 op);
274 extern int audit_add_watch(struct audit_krule *krule, struct list_head **list);
275 extern void audit_remove_watch_rule(struct audit_krule *krule);
279 extern struct audit_fsnotify_mark *audit_alloc_mark(struct audit_krule *krule, char *pathname, int …
282 extern void audit_remove_mark_rule(struct audit_krule *krule);