441 static struct audit_entry *audit_data_to_entry(struct audit_rule_data *data,  in audit_data_to_entry()  argument
452 	entry = audit_to_entry_common(data);  in audit_data_to_entry()
456 	bufp = data->buf;  in audit_data_to_entry()
457 	for (i = 0; i < data->field_count; i++) {  in audit_data_to_entry()
462 		f->op = audit_to_op(data->fieldflags[i]);  in audit_data_to_entry()
466 		f->type = data->fields[i];  in audit_data_to_entry()
467 		f->val = data->values[i];  in audit_data_to_entry()
621 	struct audit_rule_data *data;  in audit_krule_to_data()  local
625 	data = kmalloc(sizeof(*data) + krule->buflen, GFP_KERNEL);  in audit_krule_to_data()
626 	if (unlikely(!data))  in audit_krule_to_data()
628 	memset(data, 0, sizeof(*data));  in audit_krule_to_data()
630 	data->flags = krule->flags | krule->listnr;  in audit_krule_to_data()
631 	data->action = krule->action;  in audit_krule_to_data()
632 	data->field_count = krule->field_count;  in audit_krule_to_data()
633 	bufp = data->buf;  in audit_krule_to_data()
634 	for (i = 0; i < data->field_count; i++) {  in audit_krule_to_data()
637 		data->fields[i] = f->type;  in audit_krule_to_data()
638 		data->fieldflags[i] = audit_ops[f->op];  in audit_krule_to_data()
650 			data->buflen += data->values[i] =  in audit_krule_to_data()
654 			data->buflen += data->values[i] =  in audit_krule_to_data()
659 			data->buflen += data->values[i] =  in audit_krule_to_data()
664 			data->buflen += data->values[i] =  in audit_krule_to_data()
668 			data->buflen += data->values[i] =  in audit_krule_to_data()
673 				data->fields[i] = AUDIT_LOGINUID;  in audit_krule_to_data()
674 				data->values[i] = AUDIT_UID_UNSET;  in audit_krule_to_data()
679 			data->values[i] = f->val;  in audit_krule_to_data()
682 	for (i = 0; i < AUDIT_BITMASK_SIZE; i++) data->mask[i] = krule->mask[i];  in audit_krule_to_data()
684 	return data;  in audit_krule_to_data()
1072 			struct audit_rule_data *data;  in audit_list_rules()  local
1074 			data = audit_krule_to_data(r);  in audit_list_rules()
1075 			if (unlikely(!data))  in audit_list_rules()
1078 					       data,  in audit_list_rules()
1079 					       sizeof(*data) + data->buflen);  in audit_list_rules()
1082 			kfree(data);  in audit_list_rules()
1116 int audit_rule_change(int type, int seq, void *data, size_t datasz)  in audit_rule_change()  argument
1123 		entry = audit_data_to_entry(data, datasz);  in audit_rule_change()
1130 		entry = audit_data_to_entry(data, datasz);  in audit_rule_change()