226 static void audit_watch_log_rule_change(struct audit_krule *r, struct audit_watch *w, char *op)  in audit_watch_log_rule_change()  argument
237 	audit_log_untrustedstring(ab, w->path);  in audit_watch_log_rule_change()
323 	struct audit_watch *w, *nextw;  in audit_remove_parent_watches()  local
328 	list_for_each_entry_safe(w, nextw, &parent->watches, wlist) {  in audit_remove_parent_watches()
329 		list_for_each_entry_safe(r, nextr, &w->rules, rlist) {  in audit_remove_parent_watches()
331 			audit_watch_log_rule_change(r, w, "remove_rule");  in audit_remove_parent_watches()
339 		audit_remove_watch(w);  in audit_remove_parent_watches()
367 	struct audit_watch *w, *watch = krule->watch;  in audit_add_to_parent()  local
372 	list_for_each_entry(w, &parent->watches, wlist) {  in audit_add_to_parent()
373 		if (strcmp(watch->path, w->path))  in audit_add_to_parent()
381 		audit_get_watch(w);  in audit_add_to_parent()
382 		krule->watch = watch = w;  in audit_add_to_parent()