Home
last modified time | relevance | path

Searched refs:krule (Results 1 – 8 of 8) sorted by relevance

/linux-6.15/kernel/
H A Daudit_watch.c186 (krule->listnr != AUDIT_FILTER_EXIT && in audit_to_watch()
187 krule->listnr != AUDIT_FILTER_URING_EXIT) || in audit_to_watch()
189 krule->inode_f || krule->watch || krule->tree) in audit_to_watch()
196 krule->watch = watch; in audit_to_watch()
372 struct audit_watch *w, *watch = krule->watch; in audit_add_to_parent()
387 krule->watch = watch = w; in audit_add_to_parent()
399 list_add(&krule->rlist, &watch->rules); in audit_add_to_parent()
406 struct audit_watch *watch = krule->watch; in audit_add_watch()
441 audit_add_to_parent(krule, parent); in audit_add_watch()
453 struct audit_watch *watch = krule->watch; in audit_remove_watch_rule()
[all …]
H A Dauditfilter.c156 if ((krule->listnr != AUDIT_FILTER_EXIT && in audit_to_inode()
158 krule->inode_f || krule->watch || krule->tree || in audit_to_inode()
162 krule->inode_f = f; in audit_to_inode()
646 data->flags = krule->flags | krule->listnr; in audit_krule_to_data()
647 data->action = krule->action; in audit_krule_to_data()
648 data->field_count = krule->field_count; in audit_krule_to_data()
651 struct audit_field *f = &krule->fields[i]; in audit_krule_to_data()
672 audit_watch_path(krule->watch)); in audit_krule_to_data()
677 audit_tree_path(krule->tree)); in audit_krule_to_data()
681 audit_pack_string(&bufp, krule->filterkey); in audit_krule_to_data()
[all …]
H A Daudit_fsnotify.c74 struct audit_fsnotify_mark *audit_alloc_mark(struct audit_krule *krule, char *pathname, int len) in audit_alloc_mark() argument
101 audit_mark->rule = krule; in audit_alloc_mark()
139 void audit_remove_mark_rule(struct audit_krule *krule) in audit_remove_mark_rule() argument
141 struct audit_fsnotify_mark *mark = krule->exe; in audit_remove_mark_rule()
H A Daudit.h270 extern int audit_to_watch(struct audit_krule *krule, char *path, int len,
272 extern int audit_add_watch(struct audit_krule *krule, struct list_head **list);
273 extern void audit_remove_watch_rule(struct audit_krule *krule);
278 extern struct audit_fsnotify_mark *audit_alloc_mark(struct audit_krule *krule,
282 extern void audit_remove_mark_rule(struct audit_krule *krule);
/linux-6.15/include/linux/
H A Dsecurity.h2173 int security_audit_rule_known(struct audit_krule *krule);
2186 static inline int security_audit_rule_known(struct audit_krule *krule) in security_audit_rule_known() argument
H A Dlsm_hook_defs.h422 LSM_HOOK(int, 0, audit_rule_known, struct audit_krule *krule)
/linux-6.15/security/smack/
H A Dsmack_lsm.c4721 static int smack_audit_rule_known(struct audit_krule *krule) in smack_audit_rule_known() argument
4726 for (i = 0; i < krule->field_count; i++) { in smack_audit_rule_known()
4727 f = &krule->fields[i]; in smack_audit_rule_known()
/linux-6.15/security/
H A Dsecurity.c5587 int security_audit_rule_known(struct audit_krule *krule) in security_audit_rule_known() argument
5589 return call_int_hook(audit_rule_known, krule); in security_audit_rule_known()