81 static inline void audit_free_rule(struct audit_entry *e)  in audit_free_rule()  argument
84 	struct audit_krule *erule = &e->rule;  in audit_free_rule()
94 	kfree(e);  in audit_free_rule()
99 	struct audit_entry *e = container_of(head, struct audit_entry, rcu);  in audit_free_rule_rcu()  local
100 	audit_free_rule(e);  in audit_free_rule_rcu()
887 	struct audit_entry *e, *found = NULL;  in audit_find_rule()  local
898 			list_for_each_entry(e, list, list)  in audit_find_rule()
899 				if (!audit_compare_rule(&entry->rule, &e->rule)) {  in audit_find_rule()
900 					found = e;  in audit_find_rule()
909 	list_for_each_entry(e, list, list)  in audit_find_rule()
910 		if (!audit_compare_rule(&entry->rule, &e->rule)) {  in audit_find_rule()
911 			found = e;  in audit_find_rule()
925 	struct audit_entry *e;  in audit_add_rule()  local
943 	e = audit_find_rule(entry, &list);  in audit_add_rule()
944 	if (e) {  in audit_add_rule()
1008 	struct audit_entry  *e;  in audit_del_rule()  local
1025 	e = audit_find_rule(entry, &list);  in audit_del_rule()
1026 	if (!e) {  in audit_del_rule()
1031 	if (e->rule.watch)  in audit_del_rule()
1032 		audit_remove_watch_rule(&e->rule);  in audit_del_rule()
1034 	if (e->rule.tree)  in audit_del_rule()
1035 		audit_remove_tree_rule(&e->rule);  in audit_del_rule()
1037 	if (e->rule.exe)  in audit_del_rule()
1038 		audit_remove_mark_rule(&e->rule);  in audit_del_rule()
1048 	list_del_rcu(&e->list);  in audit_del_rule()
1049 	list_del(&e->rule.list);  in audit_del_rule()
1050 	call_rcu(&e->rcu, audit_free_rule_rcu);  in audit_del_rule()
1317 	struct audit_entry *e;  in audit_filter()  local
1321 	list_for_each_entry_rcu(e, &audit_filter_list[listtype], list) {  in audit_filter()
1324 		for (i = 0; i < e->rule.field_count; i++) {  in audit_filter()
1325 			struct audit_field *f = &e->rule.fields[i];  in audit_filter()
1363 				result = audit_exe_compare(current, e->rule.exe);  in audit_filter()
1376 			if (e->rule.action == AUDIT_NEVER || listtype == AUDIT_FILTER_EXCLUDE)  in audit_filter()