函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\audit_watch.c Create Date:2022-07-27 12:32:27
Last Modify:2020-03-17 17:15:07 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称：audit_watch_log_rule_change

函数原型：static void audit_watch_log_rule_change(struct audit_krule *r, struct audit_watch *w, char *op)

返回类型：void

参数：

类型参数名称
struct audit_krule *r
struct audit_watch *w
char *op
230  如果非audit_enabled则返回
232  ab等于申请审计缓冲区
233  如果非ab则返回
235  audit_log_session_info(ab)
236  写入审计信息
237  audit_log_untrustedstring - log a string that may contain random characters*@ab: audit_buffer*@string: string to be logged* Same as audit_log_n_untrustedstring(), except that strlen is used to* determine string length.
238  audit_log_key(ab, ties events to rules )
239  写入审计信息
240  发送审计信息，并释放缓冲区
调用者
名称描述
audit_update_watchUpdate inode info in audit rules based on filesystem event.
audit_remove_parent_watchesRemove all watches & rules associated with a parent that is going away.