| Function report | 
| Source Code: kernel\audit_watch.c | Create Date:2022-07-28 11:29:14 | 
| Last Modify:2020-03-17 17:15:07 | Copyright©Brick | 
| home page | Tree | 
| Annotation kernel can get tool activity | Download SCCT | Chinese | 
Name:Associate the given rule with an existing parent.* Caller must hold audit_filter_mutex.
Proto:static void audit_add_to_parent(struct audit_krule *krule, struct audit_parent *parent)
Type:void
Parameter:
| Type | Parameter | Name | 
|---|---|---|
| struct audit_krule * | krule | |
| struct audit_parent * | parent | 
| 369 | watch = associated watch | 
| 370 | watch_found = 0 | 
| 372 | BUG_ON(!mutex_is_locked( & audit_filter_mutex)) | 
| 375 | If strcmp(sertion path , sertion path ) Then Continue | 
| 378 | watch_found = 1 | 
| 381 | audit_put_watch(watch) | 
| 383 | audit_get_watch(w) | 
| 384 | associated watch = watch = w | 
| 386 | audit_put_parent(parent) | 
| 387 | Break | 
| 390 | If Not watch_found Then | 
| 391 | associated parent = parent | 
| 393 | audit_get_watch(watch) | 
| Name | Describe | 
|---|---|
| audit_add_watch | Find a matching watch entry, or add this one.* Caller must hold audit_filter_mutex. | 
| Source code conversion tool public plug-in interface | X | 
|---|---|
| Support c/c++/esqlc/java Oracle/Informix/Mysql Plug-in can realize: logical Report Code generation and batch code conversion |