227 static void audit_watch_log_rule_change(struct audit_krule *r, struct audit_watch *w, char *op)  in audit_watch_log_rule_change()  argument
239 	audit_log_key(ab, r->filterkey);  in audit_watch_log_rule_change()
240 	audit_log_format(ab, " list=%d res=1", r->listnr);  in audit_watch_log_rule_change()
250 	struct audit_krule *r, *nextr;  in audit_update_watch()  local
277 		list_for_each_entry_safe(r, nextr, &owatch->rules, rlist) {  in audit_update_watch()
279 			oentry = container_of(r, struct audit_entry, rule);  in audit_update_watch()
325 	struct audit_krule *r, *nextr;  in audit_remove_parent_watches()  local
330 		list_for_each_entry_safe(r, nextr, &w->rules, rlist) {  in audit_remove_parent_watches()
331 			e = container_of(r, struct audit_entry, rule);  in audit_remove_parent_watches()
332 			audit_watch_log_rule_change(r, w, "remove_rule");  in audit_remove_parent_watches()
335 			list_del(&r->rlist);  in audit_remove_parent_watches()
336 			list_del(&r->list);  in audit_remove_parent_watches()