函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\audit_watch.c Create Date:2022-07-27 12:32:33
Last Modify:2020-03-17 17:15:07 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称：Remove all watches & rules associated with a parent that is going away.

函数原型：static void audit_remove_parent_watches(struct audit_parent *parent)

返回类型：void

参数：

类型参数名称
struct audit_parent *parent
329  mutex_lock( & audit_filter_mutex)
332  e等于container_of - cast a member of a structure out to the containing structure*@ptr: the pointer to the member.*@type: the type of the container struct this is embedded in.*@member: the name of the member within the struct.(r, structaudit_entry, rule)
333  audit_watch_log_rule_change(r, w, "remove_rule")
334  如果exe则
336  删除链表项
337  删除链表项
338  删除不需要重新初始化的列表项
339  all_rcu() - Queue an RCU callback for invocation after a grace period
341  audit_remove_watch(w)
343  mutex_unlock - release the mutex*@lock: the mutex to be released* Unlock a mutex that has been locked by this task previously.* This function must not be used in interrupt context. Unlocking* of a not locked mutex is not allowed.
345  fsnotify_destroy_mark( & fsnotify mark on the inode , snotify handle. )
调用者
名称描述
audit_watch_handle_eventUpdate watch data in audit rules based on fsnotify events.