Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\audit_watch.c Create Date:2022-07-28 11:29:23
Last Modify:2020-03-17 17:15:07 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:audit_dupe_exe

Proto:int audit_dupe_exe(struct audit_krule *new, struct audit_krule *old)

Type:int

Parameter:

TypeParameterName
struct audit_krule *new
struct audit_krule *old
527  pathname = kstrdup(audit_mark_path(exe), GFP_KERNEL)
528  If Not pathname Then Return -ENOMEM
531  audit_mark = audit_alloc_mark(new, pathname, strlen - Find the length of a string*@s: The string to be sized)
532  If IS_ERR(audit_mark) Then
533  kfree(pathname)
534  Return PTR_ERR(audit_mark)
536  exe = audit_mark
538  Return 0
Caller
NameDescribe
audit_dupe_ruleDuplicate an audit rule. This will be a deep copy with the exception* of the watch - that pointer is carried over. The LSM specific fields* will be updated in the copy. The point is to be able to replace the old