Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\auditfilter.c Create Date:2022-07-28 11:24:22
Last Modify:2020-03-12 14:18:49 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:audit_free_rule

Proto:static inline void audit_free_rule(struct audit_entry *e)

Type:void

Parameter:

TypeParameterName
struct audit_entry *e
84  erule = rule
87  If associated watch Then
89  If fields Then When i < field_count cycle
91  audit_free_lsm_field( & fields[i])
92  kfree(fields)
93  kfree( ties events to rules )
94  kfree(e)
Caller
NameDescribe
audit_free_rule_rcu
audit_data_to_entryTranslate struct audit_rule_data to kernel's rule representation.
audit_dupe_ruleDuplicate an audit rule. This will be a deep copy with the exception* of the watch - that pointer is carried over. The LSM specific fields* will be updated in the copy. The point is to be able to replace the old
audit_rule_changeaudit_rule_change - apply all rules to the specified message type*@type: audit message type*@seq: netlink audit message sequence (serial) number*@data: payload data*@datasz: size of payload data