Home
last modified time | relevance | path

Searched refs:krule (Results 1 – 7 of 7) sorted by relevance

/linux/kernel/
H A Daudit_watch.c43 struct list_head rules; /* anchor for krule->rlist */
178 int audit_to_watch(struct audit_krule *krule, char *path, int len, u32 op) in audit_to_watch() argument
186 (krule->listnr != AUDIT_FILTER_EXIT && in audit_to_watch()
187 krule->listnr != AUDIT_FILTER_URING_EXIT) || in audit_to_watch()
189 krule->inode_f || krule->watch || krule->tree) in audit_to_watch()
196 krule->watch = watch; in audit_to_watch()
368 static void audit_add_to_parent(struct audit_krule *krule, in audit_add_to_parent() argument
371 struct audit_watch *w, *watch = krule in audit_add_to_parent()
403 audit_add_watch(struct audit_krule * krule,struct list_head ** list) audit_add_watch() argument
450 audit_remove_watch_rule(struct audit_krule * krule) audit_remove_watch_rule() argument
[all...]
H A Dauditfilter.c153 static inline int audit_to_inode(struct audit_krule *krule, in audit_to_inode() argument
156 if ((krule->listnr != AUDIT_FILTER_EXIT && in audit_to_inode()
157 krule->listnr != AUDIT_FILTER_URING_EXIT) || in audit_to_inode()
158 krule->inode_f || krule->watch || krule->tree || in audit_to_inode()
162 krule->inode_f = f; in audit_to_inode()
634 static struct audit_rule_data *audit_krule_to_data(struct audit_krule *krule)
640 data = kzalloc_flex(*data, buf, krule->buflen); in audit_krule_to_data()
644 data->flags = krule in audit_krule_to_data()
635 audit_krule_to_data(struct audit_krule * krule) audit_krule_to_data() argument
[all...]
H A Daudit_fsnotify.c74 struct audit_fsnotify_mark *audit_alloc_mark(struct audit_krule *krule, char *pathname, int len) in audit_alloc_mark() argument
102 audit_mark->rule = krule; in audit_alloc_mark()
140 void audit_remove_mark_rule(struct audit_krule *krule) in audit_remove_mark_rule() argument
142 struct audit_fsnotify_mark *mark = krule->exe; in audit_remove_mark_rule()
H A Daudit.h275 extern int audit_to_watch(struct audit_krule *krule, char *path, int len,
277 extern int audit_add_watch(struct audit_krule *krule, struct list_head **list);
278 extern void audit_remove_watch_rule(struct audit_krule *krule);
282 extern struct audit_fsnotify_mark *audit_alloc_mark(struct audit_krule *krule,
286 extern void audit_remove_mark_rule(struct audit_krule *krule);
/linux/include/linux/
H A Dlsm_hook_defs.h434 LSM_HOOK(int, 0, audit_rule_known, struct audit_krule *krule)
/linux/security/
H A Dsecurity.c5239 * @krule: audit rule
5241 * Specifies whether given @krule contains any fields related to the current
5246 int security_audit_rule_known(struct audit_krule *krule)
5248 return call_int_hook(audit_rule_known, krule);
5124 security_audit_rule_known(struct audit_krule * krule) security_audit_rule_known() argument
/linux/security/smack/
H A Dsmack_lsm.c4801 * @krule: rule of interest, in Audit kernel representation format
4807 static int smack_audit_rule_known(struct audit_krule *krule) in smack_audit_rule_known() argument
4812 for (i = 0; i < krule->field_count; i++) { in smack_audit_rule_known()
4813 f = &krule->fields[i]; in smack_audit_rule_known()