Searched refs:audit_field (Results 1 – 6 of 6) sorted by relevance
65 static void audit_free_lsm_field(struct audit_field *f) in audit_free_lsm_field()109 struct audit_field *fields; in audit_init_entry()154 struct audit_field *f) in audit_to_inode()213 struct audit_field *arch = entry->rule.arch_f; in audit_match_signal()327 static int audit_field_valid(struct audit_entry *entry, struct audit_field *f) in audit_field_valid()466 struct audit_field *f = &entry->rule.fields[i]; in audit_data_to_entry()651 struct audit_field *f = &krule->fields[i]; in audit_krule_to_data()789 static inline int audit_dupe_lsm_field(struct audit_field *df, in audit_dupe_lsm_field()790 struct audit_field *sf) in audit_dupe_lsm_field()853 memcpy(new->fields, old->fields, sizeof(struct audit_field) * fcount); in audit_dupe_rule()[all …]
334 struct audit_field *f, in audit_compare_uid()358 struct audit_field *f, in audit_compare_gid()382 struct audit_field *f, in audit_field_compare()482 struct audit_field *f = &rule->fields[i]; in audit_filter_rules()2306 struct audit_field *f = &e->rule.fields[i]; in __audit_inode()2424 struct audit_field *f = &e->rule.fields[i]; in __audit_inode_child()
50 struct audit_field *fields;51 struct audit_field *arch_f; /* quick access to arch field */52 struct audit_field *inode_f; /* quick access to an inode field */64 struct audit_field { struct
256 struct audit_field *f = &rule->fields[i]; in aa_audit_rule_known()
3654 struct audit_field *f = &rule->fields[i]; in selinux_audit_rule_known()
4723 struct audit_field *f; in smack_audit_rule_known()