Searched refs:krule (Results 1 – 3 of 3) sorted by relevance
153 static inline int audit_to_inode(struct audit_krule *krule, in audit_to_inode() argument156 if ((krule->listnr != AUDIT_FILTER_EXIT && in audit_to_inode()157 krule->listnr != AUDIT_FILTER_URING_EXIT) || in audit_to_inode()158 krule->inode_f || krule->watch || krule->tree || in audit_to_inode()162 krule->inode_f = f; in audit_to_inode()634 static struct audit_rule_data *audit_krule_to_data(struct audit_krule *krule) in audit_krule_to_data() argument640 data = kzalloc_flex(*data, buf, krule->buflen); in audit_krule_to_data()644 data->flags = krule->flags | krule->listnr; in audit_krule_to_data()645 data->action = krule->action; in audit_krule_to_data()646 data->field_count = krule->field_count; in audit_krule_to_data()[all …]
4825 * @krule: rule of interest, in Audit kernel representation format4831 static int smack_audit_rule_known(struct audit_krule *krule)4836 for (i = 0; i < krule->field_count; i++) { in smack_audit_rule_match() 4837 f = &krule->fields[i]; in smack_audit_rule_match() 4807 smack_audit_rule_known(struct audit_krule * krule) smack_audit_rule_known() argument
5238 * @krule: audit rule5240 * Specifies whether given @krule contains any fields related to the current5245 int security_audit_rule_known(struct audit_krule *krule)5247 return call_int_hook(audit_rule_known, krule); in security_audit_rule_known() 5246 security_audit_rule_known(struct audit_krule * krule) security_audit_rule_known() argument