Searched refs:krule (Results 1 – 4 of 4) sorted by relevance
/kernel/ |
D | audit_watch.c | 178 int audit_to_watch(struct audit_krule *krule, char *path, int len, u32 op) in audit_to_watch() argument 186 (krule->listnr != AUDIT_FILTER_EXIT && in audit_to_watch() 187 krule->listnr != AUDIT_FILTER_URING_EXIT) || in audit_to_watch() 189 krule->inode_f || krule->watch || krule->tree) in audit_to_watch() 196 krule->watch = watch; in audit_to_watch() 365 static void audit_add_to_parent(struct audit_krule *krule, in audit_add_to_parent() argument 368 struct audit_watch *w, *watch = krule->watch; in audit_add_to_parent() 383 krule->watch = watch = w; in audit_add_to_parent() 395 list_add(&krule->rlist, &watch->rules); in audit_add_to_parent() 400 int audit_add_watch(struct audit_krule *krule, struct list_head **list) in audit_add_watch() argument [all …]
|
D | auditfilter.c | 153 static inline int audit_to_inode(struct audit_krule *krule, in audit_to_inode() argument 156 if ((krule->listnr != AUDIT_FILTER_EXIT && in audit_to_inode() 157 krule->listnr != AUDIT_FILTER_URING_EXIT) || in audit_to_inode() 158 krule->inode_f || krule->watch || krule->tree || in audit_to_inode() 162 krule->inode_f = f; in audit_to_inode() 634 static struct audit_rule_data *audit_krule_to_data(struct audit_krule *krule) in audit_krule_to_data() argument 640 data = kmalloc(struct_size(data, buf, krule->buflen), GFP_KERNEL); in audit_krule_to_data() 645 data->flags = krule->flags | krule->listnr; in audit_krule_to_data() 646 data->action = krule->action; in audit_krule_to_data() 647 data->field_count = krule->field_count; in audit_krule_to_data() [all …]
|
D | audit_fsnotify.c | 74 struct audit_fsnotify_mark *audit_alloc_mark(struct audit_krule *krule, char *pathname, int len) in audit_alloc_mark() argument 101 audit_mark->rule = krule; in audit_alloc_mark() 139 void audit_remove_mark_rule(struct audit_krule *krule) in audit_remove_mark_rule() argument 141 struct audit_fsnotify_mark *mark = krule->exe; in audit_remove_mark_rule()
|
D | audit.h | 269 extern int audit_to_watch(struct audit_krule *krule, char *path, int len, 271 extern int audit_add_watch(struct audit_krule *krule, struct list_head **list); 272 extern void audit_remove_watch_rule(struct audit_krule *krule); 277 extern struct audit_fsnotify_mark *audit_alloc_mark(struct audit_krule *krule, 281 extern void audit_remove_mark_rule(struct audit_krule *krule);
|