函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\auditfilter.c Create Date:2022-07-27 12:28:25
Last Modify:2020-03-12 14:18:49 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称：Remove an existing rule from filterlist.

函数原型：int audit_del_rule(struct audit_entry *entry)

返回类型：int

参数：

类型参数名称
struct audit_entry *entry
1016  tree等于 associated watched tree
1018  ret等于0
1031  mutex_lock( & audit_filter_mutex)
1032  e等于Find an existing audit rule.* Caller must hold audit_filter_mutex to prevent stale rule data.
1033  如果非e则
1034  ret等于负ENOENT
1035  转到:out
1038  如果 associated watch 则audit_remove_watch_rule( & rule)
1041  如果 associated watched tree 则audit_remove_tree_rule( & rule)
1044  如果exe则
1055  删除不需要重新初始化的列表项
1056  删除链表项
1057  all_rcu() - Queue an RCU callback for invocation after a grace period
1059  out :
1060  mutex_unlock - release the mutex*@lock: the mutex to be released* Unlock a mutex that has been locked by this task previously.* This function must not be used in interrupt context. Unlocking* of a not locked mutex is not allowed.
1062  如果tree则audit_put_tree(tree)
1065  返回:ret
调用者
名称描述
audit_rule_changeaudit_rule_change - apply all rules to the specified message type*@type: audit message type*@seq: netlink audit message sequence (serial) number*@data: payload data*@datasz: size of payload data
audit_autoremove_mark_rule