函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\audit.c Create Date:2022-07-27 12:25:26
Last Modify:2020-03-12 14:18:49 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称:auditd_reset - Disconnect the auditd connection*@ac: auditd connection state* Description:* Break the auditd/kauditd connection and move all the queued records into the* hold queue in case auditd reconnects

函数原型:static void auditd_reset(const struct auditd_connection *ac)

返回类型:void

参数:

类型参数名称
const struct auditd_connection *ac
620  spin_lock_irqsave( & auditd_conn_lock, flags)
621  ac_old等于cu_dereference_protected() - fetch RCU pointer when updates prevented*@p: The pointer to read, prior to dereferencing*@c: The conditions under which the dereference will take place* Return the value of the specified RCU-protected pointer, but omit(struct auditd_connection - kernel/auditd connection state*@pid: auditd PID*@portid: netlink portid*@net: the associated network namespace*@rcu: RCU head* Description:* This struct is RCU protected; you must either hold the RCU lock for reading, lockdep_is_held( & auditd_conn_lock))
623  如果acac不等于ac_old
625  spin_unlock_irqrestore( & auditd_conn_lock, flags)
626  返回
628  cu_assign_pointer() - assign to RCU-protected pointer*@p: pointer to assign to*@v: value to assign (publish)* Assigns the specified value to the specified RCU-protected* pointer, ensuring that any concurrent RCU readers will see* any prior initialization(struct auditd_connection - kernel/auditd connection state*@pid: auditd PID*@portid: netlink portid*@net: the associated network namespace*@rcu: RCU head* Description:* This struct is RCU protected; you must either hold the RCU lock for reading, NULL)
629  spin_unlock_irqrestore( & auditd_conn_lock, flags)
631  如果ac_oldall_rcu() - Queue an RCU callback for invocation after a grace period
636 skb等于从队列头移除循环
637  kauditd_hold_skb - Queue an audit record, waiting for auditd*@skb: audit record* Description:* Queue the audit record, waiting for an instance of auditd. When this* function is called we haven't given up yet on sending the record, but things
调用者
名称描述
auditd_send_unicast_skbauditd_send_unicast_skb - Send a record via unicast to auditd*@skb: audit record* Description:* Send a skb to the audit daemon, returns positive/zero values on success and* negative values on failure; in all cases the skb will be consumed by this
kauditd_threadkauditd_thread - Worker thread to send audit records to userspace*@dummy: unused
audit_receive_msg