函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\audit_tree.c Create Date:2022-07-27 12:34:04
Last Modify:2022-05-22 16:43:11 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称：audit_make_tree

函数原型：int audit_make_tree(struct audit_krule *rule, char *pathname, unsigned int op)

返回类型：int

参数：

类型参数名称
struct audit_krule *rule
char *pathname
unsigned intop
733  如果pathname[0]不等于'/'或listnr不等于Apply rule at syscall exit 或op不等于Audit_equal或 quick access to an inode field 或 associated watch 或 associated watched tree 则返回:负EINVAL
738  associated watched tree 等于alloc_tree(pathname)
739  如果非 associated watched tree 则返回:负ENOMEM
741  返回:0
调用者
名称描述
audit_data_to_entryTranslate struct audit_rule_data to kernel's rule representation.