Lines Matching defs:krule
153 static inline int audit_to_inode(struct audit_krule *krule,
156 if ((krule->listnr != AUDIT_FILTER_EXIT &&
157 krule->listnr != AUDIT_FILTER_URING_EXIT) ||
158 krule->inode_f || krule->watch || krule->tree ||
162 krule->inode_f = f;
666 static struct audit_rule_data *audit_krule_to_data(struct audit_krule *krule)
672 data = kzalloc_flex(*data, buf, krule->buflen);
676 data->flags = krule->flags | krule->listnr;
677 data->action = krule->action;
678 data->field_count = krule->field_count;
681 struct audit_field *f = &krule->fields[i];
702 audit_watch_path(krule->watch));
707 audit_tree_path(krule->tree));
711 audit_pack_string(&bufp, krule->filterkey);
715 audit_pack_string(&bufp, audit_mark_path(krule->exe));
718 if (krule->pflags & AUDIT_LOGINUID_LEGACY && !f->val) {
729 data->mask[i] = krule->mask[i];