Function report |
Source Code:kernel\auditsc.c |
Create Date:2022-07-28 11:27:47 |
Last Modify:2020-03-17 16:31:21 | Copyright©Brick |
home page | Tree |
Annotation kernel can get tool activity | Download SCCT | Chinese |
Name:__audit_syscall_entry - fill in an audit record at syscall entry*@major: major syscall type (function)*@a1: additional syscall register 1*@a2: additional syscall register 2*@a3: additional syscall register 3*@a4: additional syscall register 4
Proto:void __audit_syscall_entry(int major, unsigned long a1, unsigned long a2, unsigned long a3, unsigned long a4)
Type:void
Parameter:
Type | Parameter | Name |
---|---|---|
int | major | |
unsigned long | a1 | |
unsigned long | a2 | |
unsigned long | a3 | |
unsigned long | a4 |
1631 | context = audit_context() |
1634 | If Not audit_enabled || Not context Then Return |
1640 | If state == Do not create per-task audit_context.* No syscall-specific audit records can* be generated. Then Return |
1643 | must be the first element = Not umber of audit rules |
1645 | prio = 0 |
1650 | arch = syscall_get_arch(current process) |
1651 | syscall number = major |
1652 | syscall arguments [0] = a1 |
1653 | syscall arguments [1] = a2 |
1654 | syscall arguments [2] = a3 |
1655 | syscall arguments [3] = a4 |
1656 | serial number for record = 0 |
1657 | 1 if task is in a syscall = 1 |
1658 | current_state = state |
Source code conversion tool public plug-in interface | X |
---|---|
Support c/c++/esqlc/java Oracle/Informix/Mysql Plug-in can realize: logical Report Code generation and batch code conversion |