Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\audit_watch.c Create Date:2022-07-28 11:29:12
Last Modify:2020-03-17 17:15:07 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:Remove all watches & rules associated with a parent that is going away.

Proto:static void audit_remove_parent_watches(struct audit_parent *parent)

Type:void

Parameter:

TypeParameterName
struct audit_parent *parent
329  mutex_lock( & audit_filter_mutex)
332  e = container_of - cast a member of a structure out to the containing structure*@ptr: the pointer to the member.*@type: the type of the container struct this is embedded in.*@member: the name of the member within the struct.(r, structaudit_entry, rule)
333  audit_watch_log_rule_change(r, w, "remove_rule")
334  If exe Then
336  deletes entry from list
337  deletes entry from list
338  list_del_rcu - deletes entry from list without re-initialization*@entry: the element to delete from the list
339  all_rcu() - Queue an RCU callback for invocation after a grace period
341  audit_remove_watch(w)
343  mutex_unlock - release the mutex*@lock: the mutex to be released* Unlock a mutex that has been locked by this task previously.* This function must not be used in interrupt context. Unlocking* of a not locked mutex is not allowed.
345  fsnotify_destroy_mark( & fsnotify mark on the inode , snotify handle. )
Caller
NameDescribe
audit_watch_handle_eventUpdate watch data in audit rules based on fsnotify events.