Function report |
Source Code:kernel\audit_watch.c |
Create Date:2022-07-28 11:29:14 |
| Last Modify:2020-03-17 17:15:07 | Copyright©Brick |
| home page | Tree |
| Annotation kernel can get tool activity | Download SCCT | Chinese |
Name:Associate the given rule with an existing parent.* Caller must hold audit_filter_mutex.
Proto:static void audit_add_to_parent(struct audit_krule *krule, struct audit_parent *parent)
Type:void
Parameter:
| Type | Parameter | Name |
|---|---|---|
| struct audit_krule * | krule | |
| struct audit_parent * | parent |
| 369 | watch = associated watch |
| 370 | watch_found = 0 |
| 372 | BUG_ON(!mutex_is_locked( & audit_filter_mutex)) |
| 375 | If strcmp(sertion path , sertion path ) Then Continue |
| 378 | watch_found = 1 |
| 381 | audit_put_watch(watch) |
| 383 | audit_get_watch(w) |
| 384 | associated watch = watch = w |
| 386 | audit_put_parent(parent) |
| 387 | Break |
| 390 | If Not watch_found Then |
| 391 | associated parent = parent |
| 393 | audit_get_watch(watch) |
| Name | Describe |
|---|---|
| audit_add_watch | Find a matching watch entry, or add this one.* Caller must hold audit_filter_mutex. |
| Source code conversion tool public plug-in interface | X |
|---|---|
| Support c/c++/esqlc/java Oracle/Informix/Mysql Plug-in can realize: logical Report Code generation and batch code conversion |