函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\audit_watch.c Create Date:2022-07-27 12:32:24
Last Modify:2020-03-17 17:15:07 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称：Translate a watch string to kernel representation.

函数原型：int audit_to_watch(struct audit_krule *krule, char *path, int len, unsigned int op)

返回类型：int

参数：

类型参数名称
struct audit_krule *krule
char *path
intlen
unsigned intop
182  如果非snotify handle. 则返回:负EOPNOTSUPP
185  如果path[0]不等于'/'或path[len - 1]恒等于'/'或listnr不等于Apply rule at syscall exit 或op不等于Audit_equal或 quick access to an inode field 或 associated watch 或 associated watched tree 则返回:负EINVAL
191  watch等于Initialize a watch entry.
192  如果是错误则返回:错误
195  associated watch 等于watch
197  返回:0
调用者
名称描述
audit_data_to_entryTranslate struct audit_rule_data to kernel's rule representation.