函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\auditfilter.c Create Date:2022-07-27 12:28:30
Last Modify:2020-03-12 14:18:49 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称：audit_rule_change - apply all rules to the specified message type*@type: audit message type*@seq: netlink audit message sequence (serial) number*@data: payload data*@datasz: size of payload data

函数原型：int audit_rule_change(int type, int seq, void *data, size_t datasz)

返回类型：int

参数：

类型参数名称
inttype
intseq
void *data
size_tdatasz
1125  err等于0
1129  当:type恒等于Add syscall filtering rule
1130  entry等于Translate struct audit_rule_data to kernel's rule representation.
1131  如果是错误则返回:错误
1133  err等于Add rule to given filterlist if not a duplicate.
1134  Log rule additions and removals
1135  退出
1136  当:type恒等于Delete syscall filtering rule
1137  entry等于Translate struct audit_rule_data to kernel's rule representation.
1138  如果是错误则返回:错误
1140  err等于Remove an existing rule from filterlist.
1141  Log rule additions and removals
1142  退出
1143  默认
1144  WARN_ON(1)
1145  返回:负EINVAL
1148  如果err或type恒等于Delete syscall filtering rule 则
1149  如果exe则
1151  audit_free_rule(entry)
1154  返回:err
调用者
名称描述
audit_receive_msg