函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\audit_watch.c Create Date:2022-07-27 12:32:38
Last Modify:2020-03-17 17:15:07 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称：Find a matching watch entry, or add this one.* Caller must hold audit_filter_mutex.

函数原型：int audit_add_watch(struct audit_krule *krule, struct list_head **list)

返回类型：int

参数：

类型参数名称
struct audit_krule *krule
struct list_head **list
403  watch等于 associated watch
406  ret等于0
413  audit_get_watch(watch)
415  mutex_unlock - release the mutex*@lock: the mutex to be released* Unlock a mutex that has been locked by this task previously.* This function must not be used in interrupt context. Unlocking* of a not locked mutex is not allowed.
418  ret等于Get path information necessary for adding watches.
421  mutex_lock( & audit_filter_mutex)
423  如果ret则
424  audit_put_watch(watch)
425  返回:ret
429  parent等于Find and return the audit_parent on the given inode. If found a reference* is taken on this parent.
430  如果非parent则
431  parent等于Initialize a parent watch entry.
432  如果是错误则
433  ret等于错误
434  转到:error
438  Associate the given rule with an existing parent.* Caller must hold audit_filter_mutex.
440  h等于audit_hash_ino((u32)associated inode number )
441  list等于Hash for inode-based rules [h]
442  error :
443  path_put( & parent_path)
444  audit_put_watch(watch)
445  返回:ret
调用者
名称描述
audit_add_ruleAdd rule to given filterlist if not a duplicate.