Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\audit_tree.c Create Date:2022-07-28 11:30:38
Last Modify:2022-05-22 16:43:11 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:audit_make_tree

Proto:int audit_make_tree(struct audit_krule *rule, char *pathname, unsigned int op)

Type:int

Parameter:

TypeParameterName
struct audit_krule *rule
char *pathname
unsigned intop
733  If pathname[0] != '/' || listnr != Apply rule at syscall exit || op != Audit_equal || quick access to an inode field || associated watch || associated watched tree Then Return -EINVAL
738  associated watched tree = alloc_tree(pathname)
739  If Not associated watched tree Then Return -ENOMEM
741  Return 0
Caller
NameDescribe
audit_data_to_entryTranslate struct audit_rule_data to kernel's rule representation.