audit_get

函数名称：audit_get_watch

函数原型：void audit_get_watch(struct audit_watch *watch)

返回类型：void

参数：

类型	参数	名称
struct audit_watch *	watch

**调用者**
名称	描述
audit_dupe_rule	Duplicate an audit rule. This will be a deep copy with the exception* of the watch - that pointer is carried over. The LSM specific fields* will be updated in the copy. The point is to be able to replace the old
audit_update_watch	Update inode info in audit rules based on filesystem event.
audit_add_to_parent	Associate the given rule with an existing parent.* Caller must hold audit_filter_mutex.
audit_add_watch	Find a matching watch entry, or add this one.* Caller must hold audit_filter_mutex.

函数逻辑报告