函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\auditsc.c Create Date:2022-07-27 12:30:17
Last Modify:2020-03-17 16:31:21 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称:audit_in_mask

函数原型:static int audit_in_mask(const struct audit_krule *rule, unsigned long val)

返回类型:int

参数:

类型参数名称
const struct audit_krule *rule
unsigned longval
763  如果val大于0xffffffff则返回:false
766  word等于AUDIT_WORD(val)
767  如果word大于等于AUDIT_BITMASK_SIZE则返回:false
770  bit等于AUDIT_BIT(val)
772  返回:mask[word]按位与bit
调用者
名称描述
audit_filter_syscallAt syscall entry and exit time, this filter is called if the* audit_state is not low enough that auditing cannot take place, but is* also not high enough that we already know we have to write an audit* record (i
audit_filter_inode_nameGiven an audit_name check the inode hash table to see if they match.* Called holding the rcu read lock to protect the use of audit_inode_hash