函数逻辑报告 |
Source Code:kernel\audit_watch.c |
Create Date:2022-07-27 12:32:27 |
Last Modify:2020-03-17 17:15:07 | Copyright©Brick |
首页 | 函数Tree |
注解内核,赢得工具 | 下载SCCT | English |
函数名称:audit_watch_log_rule_change
函数原型:static void audit_watch_log_rule_change(struct audit_krule *r, struct audit_watch *w, char *op)
返回类型:void
参数:
类型 | 参数 | 名称 |
---|---|---|
struct audit_krule * | r | |
struct audit_watch * | w | |
char * | op |
230 | 如果非audit_enabled则返回 |
233 | 如果非ab则返回 |
235 | audit_log_session_info(ab) |
236 | 写入审计信息 |
238 | audit_log_key(ab, ties events to rules ) |
239 | 写入审计信息 |
240 | 发送审计信息,并释放缓冲区 |
名称 | 描述 |
---|---|
audit_update_watch | Update inode info in audit rules based on filesystem event. |
audit_remove_parent_watches | Remove all watches & rules associated with a parent that is going away. |
源代码转换工具 开放的插件接口 | X |
---|---|
支持:c/c++/esqlc/java Oracle/Informix/Mysql 插件可实现:逻辑报告 代码生成和批量转换代码 |