279 			oentry = container_of(r, struct audit_entry, rule);  in audit_update_watch()
280 			list_del(&oentry->rule.rlist);  in audit_update_watch()
283 			nentry = audit_dupe_rule(&oentry->rule);  in audit_update_watch()
285 				list_del(&oentry->rule.list);  in audit_update_watch()
295 				audit_put_watch(nentry->rule.watch);  in audit_update_watch()
297 				nentry->rule.watch = nwatch;  in audit_update_watch()
298 				list_add(&nentry->rule.rlist, &nwatch->rules);  in audit_update_watch()
300 				list_replace(&oentry->rule.list,  in audit_update_watch()
301 					     &nentry->rule.list);  in audit_update_watch()
303 			if (oentry->rule.exe)  in audit_update_watch()
304 				audit_remove_mark(oentry->rule.exe);  in audit_update_watch()
331 			e = container_of(r, struct audit_entry, rule);  in audit_remove_parent_watches()
333 			if (e->rule.exe)  in audit_remove_parent_watches()
334 				audit_remove_mark(e->rule.exe);  in audit_remove_parent_watches()