227 static void audit_watch_log_rule_change(struct audit_krule *r, struct audit_watch *w, char *op)  in audit_watch_log_rule_change()  argument
238 	audit_log_untrustedstring(ab, w->path);  in audit_watch_log_rule_change()
324 	struct audit_watch *w, *nextw;  in audit_remove_parent_watches()  local
329 	list_for_each_entry_safe(w, nextw, &parent->watches, wlist) {  in audit_remove_parent_watches()
330 		list_for_each_entry_safe(r, nextr, &w->rules, rlist) {  in audit_remove_parent_watches()
332 			audit_watch_log_rule_change(r, w, "remove_rule");  in audit_remove_parent_watches()
340 		audit_remove_watch(w);  in audit_remove_parent_watches()
368 	struct audit_watch *w, *watch = krule->watch;  in audit_add_to_parent()  local
373 	list_for_each_entry(w, &parent->watches, wlist) {  in audit_add_to_parent()
374 		if (strcmp(watch->path, w->path))  in audit_add_to_parent()
382 		audit_get_watch(w);  in audit_add_to_parent()
383 		krule->watch = watch = w;  in audit_add_to_parent()