Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\audit.c Create Date:2022-07-28 11:22:32
Last Modify:2020-03-12 14:18:49 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:auditd_reset - Disconnect the auditd connection*@ac: auditd connection state* Description:* Break the auditd/kauditd connection and move all the queued records into the* hold queue in case auditd reconnects

Proto:static void auditd_reset(const struct auditd_connection *ac)

Type:void

Parameter:

TypeParameterName
const struct auditd_connection *ac
620  spin_lock_irqsave( & auditd_conn_lock, flags)
621  ac_old = cu_dereference_protected() - fetch RCU pointer when updates prevented*@p: The pointer to read, prior to dereferencing*@c: The conditions under which the dereference will take place* Return the value of the specified RCU-protected pointer, but omit(struct auditd_connection - kernel/auditd connection state*@pid: auditd PID*@portid: netlink portid*@net: the associated network namespace*@rcu: RCU head* Description:* This struct is RCU protected; you must either hold the RCU lock for reading, lockdep_is_held( & auditd_conn_lock))
623  If ac && ac != ac_old Then
625  spin_unlock_irqrestore( & auditd_conn_lock, flags)
626  Return
628  cu_assign_pointer() - assign to RCU-protected pointer*@p: pointer to assign to*@v: value to assign (publish)* Assigns the specified value to the specified RCU-protected* pointer, ensuring that any concurrent RCU readers will see* any prior initialization(struct auditd_connection - kernel/auditd connection state*@pid: auditd PID*@portid: netlink portid*@net: the associated network namespace*@rcu: RCU head* Description:* This struct is RCU protected; you must either hold the RCU lock for reading, NULL)
629  spin_unlock_irqrestore( & auditd_conn_lock, flags)
631  If ac_old Then all_rcu() - Queue an RCU callback for invocation after a grace period
636  When skb = remove from the head of the queue cycle
637  kauditd_hold_skb - Queue an audit record, waiting for auditd*@skb: audit record* Description:* Queue the audit record, waiting for an instance of auditd. When this* function is called we haven't given up yet on sending the record, but things
Caller
NameDescribe
auditd_send_unicast_skbauditd_send_unicast_skb - Send a record via unicast to auditd*@skb: audit record* Description:* Send a skb to the audit daemon, returns positive/zero values on success and* negative values on failure; in all cases the skb will be consumed by this
kauditd_threadkauditd_thread - Worker thread to send audit records to userspace*@dummy: unused
audit_receive_msg