Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\audit.c Create Date:2022-07-28 11:22:29
Last Modify:2020-03-12 14:18:49 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:kauditd_print_skb - Print the audit record to the ring buffer*@skb: audit record* Whatever the reason, this packet may not make it to the auditd connection* so write it via printk so the information isn't completely lost.

Proto:static void kauditd_printk_skb(struct sk_buff *skb)

Type:void

Parameter:

TypeParameterName
struct sk_buff *skb
528  nlh = nlmsg_hdr(skb)
529  data = lmsg_data - head of message payload*@nlh: netlink message header
531  If Message content != End of multi-record event && printk_ratelimit() Then pr_notice("type=%d %s\n", Message content , data)
Caller
NameDescribe
kauditd_hold_skbkauditd_hold_skb - Queue an audit record, waiting for auditd*@skb: audit record* Description:* Queue the audit record, waiting for an instance of auditd. When this* function is called we haven't given up yet on sending the record, but things