函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\audit.c Create Date:2022-07-27 12:25:28
Last Modify:2020-03-12 14:18:49 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称：auditd_send_unicast_skb - Send a record via unicast to auditd*@skb: audit record* Description:* Send a skb to the audit daemon, returns positive/zero values on success and* negative values on failure; in all cases the skb will be consumed by this

函数原型：static int auditd_send_unicast_skb(struct sk_buff *skb)

返回类型：int

参数：

类型参数名称
struct sk_buff *skb
666  _read_lock() - mark the beginning of an RCU read-side critical section* When synchronize_rcu() is invoked on one CPU while other CPUs* are within RCU read-side critical sections, then the* synchronize_rcu() is guaranteed to block until after all the other
667  ac等于cu_dereference() - fetch RCU-protected pointer for dereferencing*@p: The pointer to read, prior to dereferencing* This is a simple wrapper around rcu_dereference_check().(struct auditd_connection - kernel/auditd connection state*@pid: auditd PID*@portid: netlink portid*@net: the associated network namespace*@rcu: RCU head* Description:* This struct is RCU protected; you must either hold the RCU lock for reading)
668  如果非ac则
669  _read_unlock() - marks the end of an RCU read-side critical section.* In most situations, rcu_read_unlock() is immune from deadlock.* However, in kernels built with CONFIG_RCU_BOOST, rcu_read_unlock()
670  释放缓存
671  rc等于负ECONNREFUSED
672  转到:err
674  net等于get_net(net)
675  sk等于audit_get_sk - Return the audit socket for the given network namespace*@net: the destination network namespace* Description:* Returns the sock pointer if valid, NULL otherwise. The caller must ensure
676  portid等于portid
677  _read_unlock() - marks the end of an RCU read-side critical section.* In most situations, rcu_read_unlock() is immune from deadlock.* However, in kernels built with CONFIG_RCU_BOOST, rcu_read_unlock()
679  rc等于netlink_unicast(sk, skb, portid, 0)
680  put_net(net)
681  如果rc小于0则转到:err
684  返回:rc
686  err :
687  如果ac且rc恒等于负ECONNREFUSED则auditd_reset - Disconnect the auditd connection*@ac: auditd connection state* Description:* Break the auditd/kauditd connection and move all the queued records into the* hold queue in case auditd reconnects
689  返回:rc
调用者
名称描述
audit_replace