函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\audit_fsnotify.c Create Date:2022-07-27 12:33:14
Last Modify:2020-03-17 18:09:23 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称：Update mark data in audit rules based on fsnotify events.

函数原型：static int audit_mark_handle_event(struct fsnotify_group *group, struct inode *to_tell, unsigned int mask, const void *data, int data_type, const struct qstr *dname, unsigned int cookie, struct fsnotify_iter_info *iter_info)

返回类型：int

参数：

类型参数名称
struct fsnotify_group *group
struct inode *to_tell
unsigned intmask
const void *data
intdata_type
const struct qstr *dname
unsigned intcookie
struct fsnotify_iter_info *iter_info
161  inode_mark等于fsnotify_iter_inode_mark(iter_info)
163  const struct inode * inode = NULL
165  audit_mark等于container_of - cast a member of a structure out to the containing structure*@ptr: the pointer to the member.*@type: the type of the container struct this is embedded in.*@member: the name of the member within the struct.(inode_mark, structaudit_fsnotify_mark, mark)
167  BUG_ON(group != snotify handle. )
170  当:data_type恒等于FSNOTIFY_EVENT_PATH
171  inode等于 Where the name belongs to - NULL is * negative
172  退出
173  当:data_type恒等于FSNOTIFY_EVENT_INODE
174  inode等于data
175  退出
176  默认
177  BUG()
178  返回:0
181  如果mask按位与Subfile was created 按位或File was moved to Y 按位或Subfile was deleted 按位或File was moved from X 的值则
182  如果audit_compare_dname_path - compare given dentry name with last component in* given path. Return of 0 indicates a match.*@dname: dentry name that we're comparing*@path: full pathname that we're comparing*@parentlen: length of the parent if known则返回:0
184  audit_update_mark(audit_mark, inode)
185  否则如果mask按位与Self was deleted 按位或de on umount fs 按位或Self was moved 的值则audit_autoremove_mark_rule(audit_mark)
188  返回:0