Function report |
Source Code:kernel\auditfilter.c |
Create Date:2022-07-28 11:25:18 |
Last Modify:2020-03-12 14:18:49 | Copyright©Brick |
home page | Tree |
Annotation kernel can get tool activity | Download SCCT | Chinese |
Name:Remove an existing rule from filterlist.
Proto:int audit_del_rule(struct audit_entry *entry)
Type:int
Parameter:
Type | Parameter | Name |
---|---|---|
struct audit_entry * | entry |
1016 | tree = associated watched tree |
1018 | ret = 0 |
1031 | mutex_lock( & audit_filter_mutex) |
1032 | e = Find an existing audit rule.* Caller must hold audit_filter_mutex to prevent stale rule data. |
1033 | If Not e Then |
1038 | If associated watch Then audit_remove_watch_rule( & rule) |
1041 | If associated watched tree Then audit_remove_tree_rule( & rule) |
1044 | If exe Then |
1059 | out : |
1062 | If tree Then audit_put_tree(tree) |
1065 | Return ret |
Name | Describe |
---|---|
audit_rule_change | audit_rule_change - apply all rules to the specified message type*@type: audit message type*@seq: netlink audit message sequence (serial) number*@data: payload data*@datasz: size of payload data |
audit_autoremove_mark_rule |
Source code conversion tool public plug-in interface | X |
---|---|
Support c/c++/esqlc/java Oracle/Informix/Mysql Plug-in can realize: logical Report Code generation and batch code conversion |