Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\audit.c Create Date:2022-07-28 11:23:59
Last Modify:2020-03-12 14:18:49 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:audit_log - Log an audit record*@ctx: audit context*@gfp_mask: type of allocation*@type: audit message type*@fmt: format string to use*@...: variable parameters matching the format string* This is a convenience function that calls audit_log_start,

Proto:void audit_log(struct audit_context *ctx, gfp_t gfp_mask, int type, const char *fmt, ...)

Type:void

Parameter:

TypeParameterName
struct audit_context *ctx
gfp_tgfp_mask
inttype
const char *fmt
2346  ab = audit_log_start - obtain an audit buffer*@ctx: audit_context (may be NULL)*@gfp_mask: type of allocation*@type: audit message type* Returns audit_buffer pointer on success or NULL on error
2347  If ab Then
2348  va_start(args, fmt)
2349  Format an audit message into the audit buffer. If there isn't enough* room in the audit buffer, more room will be allocated and vsnprint* will be called a second time. Currently, we assume that a printk
2350  va_end(args)
2351  audit_log_end - end one audit record*@ab: the audit_buffer* We can not do a netlink send inside an irq context because it blocks (last* arg, flags, is not set to MSG_DONTWAIT), so the audit buffer is placed on a* queue and a tasklet is scheduled to remove
Caller
NameDescribe
audit_initInitialize audit support at boot time.
__audit_fanotify
__audit_tk_injoffset
audit_log_ntp_val