Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\audit.c Create Date:2022-07-28 11:22:30
Last Modify:2020-03-12 14:18:49 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:kauditd_hold_skb - Queue an audit record, waiting for auditd*@skb: audit record* Description:* Queue the audit record, waiting for an instance of auditd. When this* function is called we haven't given up yet on sending the record, but things

Proto:static void kauditd_hold_skb(struct sk_buff *skb)

Type:void

Parameter:

TypeParameterName
struct sk_buff *skb
565  kauditd_print_skb - Print the audit record to the ring buffer*@skb: audit record* Whatever the reason, this packet may not make it to the auditd connection* so write it via printk so the information isn't completely lost.
568  If Not Default state when kernel boots without any parameters. Then
569  free an sk_buff
570  Return
574  If Not Number of outstanding audit_buffers allowed.* When set to zero, this means unlimited. || skb_queue_len - get queue length*@list_: list to measure* Return the length of an &sk_buff queue. < Number of outstanding audit_buffers allowed.* When set to zero, this means unlimited. Then
576  queue a buffer at the list tail
577  Return
581  audit_log_lost - conditionally log lost audit message event*@message: the message stating reason for lost audit message* Emit at least 1 message per second, even if audit_rate_check is* throttling.* Always increment the lost messages counter.
582  free an sk_buff
Caller
NameDescribe
auditd_resetauditd_reset - Disconnect the auditd connection*@ac: auditd connection state* Description:* Break the auditd/kauditd connection and move all the queued records into the* hold queue in case auditd reconnects