函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\auditsc.c Create Date:2022-07-27 12:31:02
Last Modify:2020-03-17 16:31:21 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称：__audit_free - free a per-task audit context*@tsk: task whose audit context block to free* Called from copy_process and do_exit

函数原型：void __audit_free(struct task_struct *tsk)

返回类型：void

参数：

类型参数名称
struct task_struct *tsk
1584  context等于audit_context
1586  如果非context则返回
1589  如果非链表为空则audit_kill_trees(context)
1597  如果tsk恒等于当前进程且非调用号且是系统调用则
1598  返回值等于0
1599  返回码等于0
1601  At syscall entry and exit time, this filter is called if the* audit_state is not low enough that auditing cannot take place, but is* also not high enough that we already know we have to write an audit* record (i
1603  At syscall exit time, this filter is called if any audit_names have been* collected during syscall processing. We only check rules in sublists at hash* buckets applicable to the inode numbers in audit_names.
1604  如果当前状态恒等于全程审计则audit_log_exit()
1608  audit_set_context(tsk, NULL)
1609  audit_free_context(context)