函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\auditfilter.c Create Date:2022-07-27 12:28:20
Last Modify:2020-03-12 14:18:49 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称：Find an existing audit rule.* Caller must hold audit_filter_mutex to prevent stale rule data.

函数原型：static struct audit_entry *audit_find_rule(struct audit_entry *entry, struct list_head **p)

返回类型：struct audit_entry

参数：

类型参数名称
struct audit_entry *entry
struct list_head **p
894  struct audit_entry * e, * found = NULL
898  如果 quick access to an inode field 则
899  h等于audit_hash_ino(val)
900  p等于list等于Hash for inode-based rules [h]
901  否则如果 associated watch 则
903  以h小于AUDIT_INODE_BUCKETS循环
904  list等于Hash for inode-based rules [h]
905  list_for_each_entry - iterate over list of given type*@pos: the type * to use as a loop cursor.*@head: the head for your list.*@member: the name of the list_head within the struct.(e, list, list)
906  如果非Compare two rules in kernel format. Considered success if rules* don't match. 则
907  found等于e
908  转到:out
911  转到:out
912  否则
913  p等于list等于Audit filter lists, defined in [listnr]
916  list_for_each_entry - iterate over list of given type*@pos: the type * to use as a loop cursor.*@head: the head for your list.*@member: the name of the list_head within the struct.(e, list, list)
917  如果非Compare two rules in kernel format. Considered success if rules* don't match. 则
918  found等于e
919  转到:out
922  out :
923  返回:found
调用者
名称描述
audit_add_ruleAdd rule to given filterlist if not a duplicate.
audit_del_ruleRemove an existing rule from filterlist.