函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\audit_fsnotify.c Create Date:2022-07-27 12:33:09
Last Modify:2020-03-17 18:09:23 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称：audit_alloc_mark

函数原型：struct audit_fsnotify_mark *audit_alloc_mark(struct audit_krule *krule, char *pathname, int len)

返回类型：struct audit_fsnotify_mark

参数：

类型参数名称
struct audit_krule *krule
char *pathname
intlen
82  如果pathname[0]不等于'/'或pathname[len - 1]恒等于'/'则返回:错误号
85  dentry等于kern_path_locked(pathname, & path)
86  如果是错误则返回:dentry
88  inode等于 Where the name belongs to - NULL is * negative
89  inode_unlock(inode)
91  audit_mark等于分配内存并置零
92  如果此条件成立可能性小(为编译器优化)(!audit_mark)则
93  audit_mark等于错误号
94  转到:out
97  Nothing fancy, just initialize lists and locks and counters.
98  Mask this mark is for [mark->lock, group->mark_mutex] 等于snotify events we care about.
99  sertion path 等于pathname
100  audit_update_mark(audit_mark, Where the name belongs to - NULL is * negative )
101  rule等于krule
103  ret等于fsnotify_add_inode_mark( & snotify mark on the inode , inode, true)
104  如果ret小于0则
105  fsnotify_put_mark( & snotify mark on the inode )
106  audit_mark等于错误号
108  out :
109  dput(dentry)
110  path_put( & path)
111  返回:audit_mark
调用者
名称描述
audit_data_to_entryTranslate struct audit_rule_data to kernel's rule representation.
audit_dupe_exe