Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\audit.c Create Date:2022-07-28 11:22:52
Last Modify:2020-03-12 14:18:49 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:audit_log_feature_change

Proto:static void audit_log_feature_change(int which, unsigned int old_feature, unsigned int new_feature, unsigned int old_lock, unsigned int new_lock, int res)

Type:void

Parameter:

TypeParameterName
intwhich
unsigned intold_feature
unsigned intnew_feature
unsigned intold_lock
unsigned intnew_lock
intres
1090  If audit_enabled == AUDIT_OFF Then Return
1093  ab = audit_log_start - obtain an audit buffer*@ctx: audit_context (may be NULL)*@gfp_mask: type of allocation*@type: audit message type* Returns audit_buffer pointer on success or NULL on error
1094  If Not ab Then Return
1096  audit_log_task_info(ab)
1097  audit_log_format - format a message into the audit buffer.*@ab: audit_buffer*@fmt: format string*@...: optional parameters matching @fmt string* All the work is done in audit_log_vformat.
1100  audit_log_end - end one audit record*@ab: the audit_buffer* We can not do a netlink send inside an irq context because it blocks (last* arg, flags, is not set to MSG_DONTWAIT), so the audit buffer is placed on a* queue and a tasklet is scheduled to remove
Caller
NameDescribe
audit_set_feature