Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\audit_watch.c Create Date:2022-07-28 11:29:03
Last Modify:2020-03-17 17:15:07 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:Translate a watch string to kernel representation.

Proto:int audit_to_watch(struct audit_krule *krule, char *path, int len, unsigned int op)

Type:int

Parameter:

TypeParameterName
struct audit_krule *krule
char *path
intlen
unsigned intop
182  If Not snotify handle. Then Return -EOPNOTSUPP
185  If path[0] != '/' || path[len - 1] == '/' || listnr != Apply rule at syscall exit || op != Audit_equal || quick access to an inode field || associated watch || associated watched tree Then Return -EINVAL
191  watch = Initialize a watch entry.
192  If IS_ERR(watch) Then Return PTR_ERR(watch)
195  associated watch = watch
197  Return 0
Caller
NameDescribe
audit_data_to_entryTranslate struct audit_rule_data to kernel's rule representation.