Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\auditsc.c Create Date:2022-07-28 11:27:45
Last Modify:2020-03-17 16:31:21 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:__audit_free - free a per-task audit context*@tsk: task whose audit context block to free* Called from copy_process and do_exit

Proto:void __audit_free(struct task_struct *tsk)

Type:void

Parameter:

TypeParameterName
struct task_struct *tsk
1584  context = audit_context
1586  If Not context Then Return
1589  If Not list_empty - tests whether a list is empty*@head: the list to test. Then audit_kill_trees(context)
1597  If tsk == current process && Not must be the first element && 1 if task is in a syscall Then
1598  urn code is valid = 0
1599  syscall return code = 0
1601  At syscall entry and exit time, this filter is called if the* audit_state is not low enough that auditing cannot take place, but is* also not high enough that we already know we have to write an audit* record (i
1603  At syscall exit time, this filter is called if any audit_names have been* collected during syscall processing. We only check rules in sublists at hash* buckets applicable to the inode numbers in audit_names.
1604  If current_state == AUDIT_RECORD_CONTEXT Then audit_log_exit()
1608  audit_set_context(tsk, NULL)
1609  audit_free_context(context)