audit_iface

函数名称：audit_iface - do audit message for policy unpacking/load/replace/remove*@new: profile if it has been allocated (MAYBE NULL)*@ns_name: name of the ns the profile is to be loaded to (MAY BE NULL)*@name: name of the profile being manipulated (MAYBE

函数原型：static int audit_iface(struct aa_profile *new, const char *ns_name, const char *name, const char *info, struct aa_ext *e, int error)

返回类型：int

参数：

类型	参数	名称
struct aa_profile *	new
const char *	ns_name
const char *	name
const char *	info
struct aa_ext *	e
int	error

109

profile等于labels_profile(aa_current_raw_label - find the current tasks confining label* Returns: up to date confining label or the ns unconfined label (NOT NULL)* This fn will not update the tasks cred to the most up to date version)

110

TODO: cleanup audit init so we don't need _aad = {0,} (sa, LSM_AUDIT_DATA_NONE, NULL)

111

如果e则pos等于pointer to current position in the buffer 减start

113

ns等于ns_name

114

如果new则name等于hname

116

否则name等于name

118

info等于info

119

error等于error

121

返回:aa_audit - Log a profile based audit event to the audit subsystem*@type: audit type for the message*@profile: profile to check against (NOT NULL)*@sa: audit event (NOT NULL)*@cb: optional callback fn for type specific fields (MAYBE NULL)* Handle default

**调用者**
名称	描述
unpack_profile	pack_profile - unpack a serialized profile@e: serialized data extent information (NOT NULL) NOTE: unpack profile sets audit struct if there is a failure
verify_header	verify_head - unpack serialized stream header@e: serialized data read head (NOT NULL)@required: whether the header is required or optional@ns: Returns - namespace if one is specified else NULL (NOT NULL) Returns: error or 0 if header is good
verify_profile	verify_profile - Do post unpack analysis to verify profile consistency@profile: profile to verify (NOT NULL) Returns: 0 if passes verification else error

源代码转换工具开放的插件接口	X
支持：c/c++/esqlc/java Oracle/Informix/Mysql 插件可实现：逻辑报告代码生成和批量转换代码

函数逻辑报告