Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\auditfilter.c Create Date:2022-07-28 11:24:23
Last Modify:2020-03-12 14:18:49 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:Initialize an audit filterlist entry.

Proto:static inline struct audit_entry *audit_init_entry(unsigned int field_count)

Type:struct audit_entry

Parameter:

TypeParameterName
unsigned intfield_count
109  entry = kzalloc - allocate memory. The memory is set to zero.*@size: how many bytes of memory are required.*@flags: the type of memory to allocate (see kmalloc).
110  If Value for the false possibility is greater at compile time(!entry) Then Return NULL
113  fields = kcalloc - allocate memory for an array. The memory is set to zero.*@n: number of elements.*@size: element size.*@flags: the type of memory to allocate (see kmalloc).
114  If Value for the false possibility is greater at compile time(!fields) Then
115  kfree(entry)
116  Return NULL
118  fields = fields
120  Return entry
Caller
NameDescribe
audit_to_entry_commonCommon user-space to kernel rule translation.
audit_dupe_ruleDuplicate an audit rule. This will be a deep copy with the exception* of the watch - that pointer is carried over. The LSM specific fields* will be updated in the copy. The point is to be able to replace the old