Lines Matching refs:rule
278 oentry = container_of(r, struct audit_entry, rule); in audit_update_watch()
279 list_del(&oentry->rule.rlist); in audit_update_watch()
282 nentry = audit_dupe_rule(&oentry->rule); in audit_update_watch()
284 list_del(&oentry->rule.list); in audit_update_watch()
294 audit_put_watch(nentry->rule.watch); in audit_update_watch()
296 nentry->rule.watch = nwatch; in audit_update_watch()
297 list_add(&nentry->rule.rlist, &nwatch->rules); in audit_update_watch()
299 list_replace(&oentry->rule.list, in audit_update_watch()
300 &nentry->rule.list); in audit_update_watch()
302 if (oentry->rule.exe) in audit_update_watch()
303 audit_remove_mark(oentry->rule.exe); in audit_update_watch()
330 e = container_of(r, struct audit_entry, rule); in audit_remove_parent_watches()
332 if (e->rule.exe) in audit_remove_parent_watches()
333 audit_remove_mark(e->rule.exe); in audit_remove_parent_watches()