Lines Matching refs:rule
526 struct audit_krule *rule) in audit_tree_log_remove_rule() argument
536 audit_log_untrustedstring(ab, rule->tree->pathname); in audit_tree_log_remove_rule()
537 audit_log_key(ab, rule->filterkey); in audit_tree_log_remove_rule()
538 audit_log_format(ab, " list=%d res=1", rule->listnr); in audit_tree_log_remove_rule()
544 struct audit_krule *rule, *next; in kill_rules() local
547 list_for_each_entry_safe(rule, next, &tree->rules, rlist) { in kill_rules()
548 entry = container_of(rule, struct audit_entry, rule); in kill_rules()
550 list_del_init(&rule->rlist); in kill_rules()
551 if (rule->tree) { in kill_rules()
553 audit_tree_log_remove_rule(context, rule); in kill_rules()
554 if (entry->rule.exe) in kill_rules()
555 audit_remove_mark(entry->rule.exe); in kill_rules()
556 rule->tree = NULL; in kill_rules()
558 list_del(&entry->rule.list); in kill_rules()
647 int audit_remove_tree_rule(struct audit_krule *rule) in audit_remove_tree_rule() argument
650 tree = rule->tree; in audit_remove_tree_rule()
653 list_del_init(&rule->rlist); in audit_remove_tree_rule()
659 rule->tree = NULL; in audit_remove_tree_rule()
664 rule->tree = NULL; in audit_remove_tree_rule()
725 int audit_make_tree(struct audit_krule *rule, char *pathname, u32 op) in audit_make_tree() argument
729 (rule->listnr != AUDIT_FILTER_EXIT && in audit_make_tree()
730 rule->listnr != AUDIT_FILTER_URING_EXIT) || in audit_make_tree()
732 rule->inode_f || rule->watch || rule->tree) in audit_make_tree()
734 rule->tree = alloc_tree(pathname); in audit_make_tree()
735 if (!rule->tree) in audit_make_tree()
800 int audit_add_tree_rule(struct audit_krule *rule) in audit_add_tree_rule() argument
802 struct audit_tree *seed = rule->tree, *tree; in audit_add_tree_rule()
807 rule->tree = NULL; in audit_add_tree_rule()
811 rule->tree = tree; in audit_add_tree_rule()
812 list_add(&rule->rlist, &tree->rules); in audit_add_tree_rule()
818 list_add(&rule->rlist, &tree->rules); in audit_add_tree_rule()
854 if (list_empty(&rule->rlist)) { in audit_add_tree_rule()
858 rule->tree = tree; in audit_add_tree_rule()