函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\audit_tree.c Create Date:2022-07-27 12:33:53
Last Modify:2022-05-22 16:43:11 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称：kill_rules

函数原型：static void kill_rules(struct audit_context *context, struct audit_tree *tree)

返回类型：void

参数：

类型参数名称
struct audit_context *context
struct audit_tree *tree
552  entry等于container_of - cast a member of a structure out to the containing structure*@ptr: the pointer to the member.*@type: the type of the container struct this is embedded in.*@member: the name of the member within the struct.(rule, structaudit_entry, rule)
554  删除链表项并重新初始化
555  如果 associated watched tree 则
557  audit_tree_log_remove_rule(context, rule)
558  如果exe则audit_remove_mark(exe)
560  associated watched tree = NULL
561  删除不需要重新初始化的列表项
562  删除链表项
563  all_rcu() - Queue an RCU callback for invocation after a grace period
调用者
名称描述
trim_markedrim the uncommitted chunks from tree
audit_kill_trees... and that one is done if evict_chunk() decides to delay until the end* of syscall. Runs synchronously.
evict_chunkHere comes the stuff asynchronous to auditctl operations