函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\auditfilter.c Create Date:2022-07-27 12:27:26
Last Modify:2020-03-12 14:18:49 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称：audit_free_rule

函数原型：static inline void audit_free_rule(struct audit_entry *e)

返回类型：void

参数：

类型参数名称
struct audit_entry *e
84  erule等于rule
87  如果 associated watch 则
89  如果fields则以i小于field_count循环
91  audit_free_lsm_field( & fields[i])
92  kfree(fields)
93  kfree( ties events to rules )
94  kfree(e)
调用者
名称描述
audit_free_rule_rcu
audit_data_to_entryTranslate struct audit_rule_data to kernel's rule representation.
audit_dupe_ruleDuplicate an audit rule. This will be a deep copy with the exception* of the watch - that pointer is carried over. The LSM specific fields* will be updated in the copy. The point is to be able to replace the old
audit_rule_changeaudit_rule_change - apply all rules to the specified message type*@type: audit message type*@seq: netlink audit message sequence (serial) number*@data: payload data*@datasz: size of payload data