Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\audit_watch.c Create Date:2022-07-28 11:29:00
Last Modify:2020-03-17 17:15:07 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:Initialize a parent watch entry.

Proto:static struct audit_parent *audit_init_parent(struct path *path)

Type:struct audit_parent

Parameter:

TypeParameterName
struct path *path
138  inode = d_backing_inode - Get upper or lower inode we should be using*@upper: The upper layer* This is the helper that should be used to get at the inode that will be used* if this dentry were to be opened as a file. The inode may be on the upper
142  parent = kzalloc - allocate memory. The memory is set to zero.*@size: how many bytes of memory are required.*@flags: the type of memory to allocate (see kmalloc).
143  If Value for the false possibility is greater at compile time(!parent) Then Return ERR_PTR( - ENOMEM)
146  Initialization list head
148  Nothing fancy, just initialize lists and locks and counters.
149  Mask this mark is for [mark->lock, group->mark_mutex] = snotify events we care about.
150  ret = fsnotify_add_inode_mark( & fsnotify mark on the inode , inode, 0)
151  If ret < 0 Then
152  audit_free_parent(parent)
153  Return ERR_PTR(ret)
156  Return parent
Caller
NameDescribe
audit_add_watchFind a matching watch entry, or add this one.* Caller must hold audit_filter_mutex.