Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\auditfilter.c Create Date:2022-07-28 11:25:05
Last Modify:2020-03-12 14:18:49 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:Duplicate LSM field information. The lsm_rule is opaque, so must be* re-initialized.

Proto:static inline int audit_dupe_lsm_field(struct audit_field *df, struct audit_field *sf)

Type:int

Parameter:

TypeParameterName
struct audit_field *df
struct audit_field *sf
782  ret = 0
786  lsm_str = kstrdup(lsm_str, GFP_KERNEL)
787  If Value for the false possibility is greater at compile time(!lsm_str) Then Return -ENOMEM
789  lsm_str = lsm_str
792  ret = security_audit_rule_init(type, op, lsm_str, (void * * ) & lsm_rule)
796  If ret == -EINVAL Then
797  pr_warn("audit rule for LSM \'%s\' is invalid\n", lsm_str)
799  ret = 0
802  Return ret
Caller
NameDescribe
audit_dupe_ruleDuplicate an audit rule. This will be a deep copy with the exception* of the watch - that pointer is carried over. The LSM specific fields* will be updated in the copy. The point is to be able to replace the old