函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\auditsc.c Create Date:2022-07-27 12:30:19
Last Modify:2020-03-17 16:31:21 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称：Given an audit_name check the inode hash table to see if they match.* Called holding the rcu read lock to protect the use of audit_inode_hash

函数原型：static int audit_filter_inode_name(struct task_struct *tsk, struct audit_names *n, struct audit_context *ctx)

返回类型：int

参数：

类型参数名称
struct task_struct *tsk
struct audit_names *n
struct audit_context *ctx
811  h等于audit_hash_ino((u32)ino)
812  list等于Hash for inode-based rules [h]
817  如果audit_in_mask( & rule, 系统调用进程)且Compare a task_struct with an audit_rule. Return 1 on match, 0* otherwise.* If task_creation is true, this is an explicit indication that we are* filtering a task rule at task creation time. This and tsk == current are则
819  当前状态等于state
820  返回:1
823  返回:0
调用者
名称描述
audit_filter_inodesAt syscall exit time, this filter is called if any audit_names have been* collected during syscall processing. We only check rules in sublists at hash* buckets applicable to the inode numbers in audit_names.