Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\audit_tree.c Create Date:2022-07-28 11:30:29
Last Modify:2022-05-22 16:43:11 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:kill_rules

Proto:static void kill_rules(struct audit_context *context, struct audit_tree *tree)

Type:void

Parameter:

TypeParameterName
struct audit_context *context
struct audit_tree *tree
552  entry = container_of - cast a member of a structure out to the containing structure*@ptr: the pointer to the member.*@type: the type of the container struct this is embedded in.*@member: the name of the member within the struct.(rule, structaudit_entry, rule)
554  list_del_init - deletes entry from list and reinitialize it.*@entry: the element to delete from the list.
555  If associated watched tree Then
557  audit_tree_log_remove_rule(context, rule)
558  If exe Then audit_remove_mark(exe)
560  associated watched tree = NULL
561  list_del_rcu - deletes entry from list without re-initialization*@entry: the element to delete from the list
562  deletes entry from list
563  all_rcu() - Queue an RCU callback for invocation after a grace period
Caller
NameDescribe
trim_markedrim the uncommitted chunks from tree
audit_kill_trees... and that one is done if evict_chunk() decides to delay until the end* of syscall. Runs synchronously.
evict_chunkHere comes the stuff asynchronous to auditctl operations