Function report |
Source Code:kernel\auditfilter.c |
Create Date:2022-07-28 11:25:23 |
Last Modify:2020-03-12 14:18:49 | Copyright©Brick |
home page | Tree |
Annotation kernel can get tool activity | Download SCCT | Chinese |
Name:audit_rule_change - apply all rules to the specified message type*@type: audit message type*@seq: netlink audit message sequence (serial) number*@data: payload data*@datasz: size of payload data
Proto:int audit_rule_change(int type, int seq, void *data, size_t datasz)
Type:int
Parameter:
Type | Parameter | Name |
---|---|---|
int | type | |
int | seq | |
void * | data | |
size_t | datasz |
1125 | err = 0 |
1129 | Case type == Add syscall filtering rule |
1135 | Break |
1136 | Case type == Delete syscall filtering rule |
1142 | Break |
1143 | Default |
1148 | If err || type == Delete syscall filtering rule Then |
1149 | If exe Then |
1151 | audit_free_rule(entry) |
1154 | Return err |
Source code conversion tool public plug-in interface | X |
---|---|
Support c/c++/esqlc/java Oracle/Informix/Mysql Plug-in can realize: logical Report Code generation and batch code conversion |