Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\audit_watch.c Create Date:2022-07-28 11:29:04
Last Modify:2020-03-17 17:15:07 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:Duplicate the given audit watch. The new watch's rules list is initialized* to an empty list and wlist is undefined.

Proto:static struct audit_watch *audit_dupe_watch(struct audit_watch *old)

Type:struct audit_watch

Parameter:

TypeParameterName
struct audit_watch *old
207  path = kstrdup(sertion path , GFP_KERNEL)
208  If Value for the false possibility is greater at compile time(!path) Then Return ERR_PTR( - ENOMEM)
211  new = Initialize a watch entry.
212  If IS_ERR(new) Then
213  kfree(path)
214  Go to out
217  associated superblock device = associated superblock device
218  associated inode number = associated inode number
219  audit_get_parent(associated parent )
220  associated parent = associated parent
222  out :
223  Return new
Caller
NameDescribe
audit_update_watchUpdate inode info in audit rules based on filesystem event.