audit_log

函数名称：申请审计缓冲区

函数原型：struct audit_buffer *audit_log_start(struct audit_context *ctx, gfp_t gfp_mask, int type)

返回类型：struct audit_buffer

参数：

类型	参数	名称
struct audit_context *	ctx
gfp_t	gfp_mask
int	type

**调用者**
名称	描述
audit_log_config_change
audit_log_common_recv_msg
audit_log_feature_change
audit_log_path_denied	audit_log_path_denied - report a path restriction denial@type: audit message type (AUDIT_ANOM_LINK, AUDIT_ANOM_CREAT, etc)@operation: specific operation name
audit_log_set_loginuid
audit_log	audit_log - Log an audit record@ctx: audit context@gfp_mask: type of allocation@type: audit message type@fmt: format string to use@...: variable parameters matching the format string This is a convenience function that calls audit_log_start,
audit_log_rule_change	Log rule additions and removals
audit_log_pid_context
audit_log_execve_info
show_special
audit_log_name	audit_log_name - produce AUDIT_PATH record from struct audit_names@context: audit_context for the task@n: audit_names structure with reportable details@path: optional path to report instead of audit_names->name@record_num: record number to report when
audit_log_proctitle
audit_log_exit
audit_core_dumps	audit_core_dumps - record information about processes that end abnormally@signr: signal value If a process ends with a core dump, something fishy is going on and we* should record the event for investigation.
audit_seccomp	audit_seccomp - record information about a seccomp action@syscall: syscall number@signr: signal value@code: the seccomp action Record the information associated with a seccomp action. Event filtering for
audit_seccomp_actions_logged
audit_watch_log_rule_change
audit_mark_log_rule_change
audit_tree_log_remove_rule
selinux_setprocattr
common_lsm_audit	mmon_lsm_audit - generic LSM auditing function@a: auxiliary audit data@pre_audit: lsm-specific pre-audit callback@post_audit: lsm-specific post-audit callback setup the audit buffer for common security information* uses callback to print LSM specific
integrity_audit_msg
ima_audit_measurement
selinux_inode_setxattr
integrity_audit_log_start

源代码转换工具开放的插件接口	X
支持：c/c++/esqlc/java Oracle/Informix/Mysql 插件可实现：逻辑报告代码生成和批量转换代码

源代码转换工具
开放的插件接口

支持：c/c++/esqlc/java
Oracle/Informix/Mysql
插件可实现：逻辑报告
代码生成和批量转换代码

函数逻辑报告