audit_remove_mark

Name:audit_remove_mark

Proto:void audit_remove_mark(struct audit_fsnotify_mark *audit_mark)

Type:void

Parameter:

Type	Parameter	Name
struct audit_fsnotify_mark *	audit_mark

134

fsnotify_destroy_mark( & snotify mark on the inode , snotify handle. )

135

fsnotify_put_mark( & snotify mark on the inode )

**Caller**
Name	Describe
audit_data_to_entry	Translate struct audit_rule_data to kernel's rule representation.
audit_dupe_rule	Duplicate an audit rule. This will be a deep copy with the exception* of the watch - that pointer is carried over. The LSM specific fields* will be updated in the copy. The point is to be able to replace the old
audit_rule_change	audit_rule_change - apply all rules to the specified message type@type: audit message type@seq: netlink audit message sequence (serial) number@data: payload data@datasz: size of payload data
update_lsm_rule
audit_update_watch	Update inode info in audit rules based on filesystem event.
audit_remove_parent_watches	Remove all watches & rules associated with a parent that is going away.

Source code conversion tool public plug-in interface	X
Support c/c++/esqlc/java Oracle/Informix/Mysql Plug-in can realize: logical Report Code generation and batch code conversion