函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\auditfilter.c Create Date:2022-07-27 12:28:23
Last Modify:2020-03-12 14:18:49 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称：Add rule to given filterlist if not a duplicate.

函数原型：static inline int audit_add_rule(struct audit_entry *entry)

返回类型：int

参数：

类型参数名称
struct audit_entry *entry
933  watch等于 associated watch
934  tree等于 associated watched tree
936  err等于0
949  mutex_lock( & audit_filter_mutex)
950  e等于Find an existing audit rule.* Caller must hold audit_filter_mutex to prevent stale rule data.
951  如果e则
952  mutex_unlock - release the mutex*@lock: the mutex to be released* Unlock a mutex that has been locked by this task previously.* This function must not be used in interrupt context. Unlocking* of a not locked mutex is not allowed.
953  err等于负EEXIST
955  如果tree则audit_put_tree(tree)
957  返回:err
960  如果watch则
962  err等于audit_add_watch( & rule, & list)
963  如果err则
964  mutex_unlock - release the mutex*@lock: the mutex to be released* Unlock a mutex that has been locked by this task previously.* This function must not be used in interrupt context. Unlocking* of a not locked mutex is not allowed.
969  如果tree则audit_put_tree(tree)
971  返回:err
974  如果tree则
975  err等于audit_add_tree_rule( & rule)
976  如果err则
977  mutex_unlock - release the mutex*@lock: the mutex to be released* Unlock a mutex that has been locked by this task previously.* This function must not be used in interrupt context. Unlocking* of a not locked mutex is not allowed.
978  返回:err
982  prio等于0ULL的反
983  如果listnr恒等于Apply rule at syscall exit 则
984  如果flags按位与Prepend to front of list 则prio等于prio_high先自加
986  否则prio等于prio_low先自减
990  如果flags按位与Prepend to front of list 则
991  添加链表项
993  添加RCU保护项
994  flags与等于Prepend to front of list 的反
995  否则
996  添加链表项
998  添加RCU链表项
1007  mutex_unlock - release the mutex*@lock: the mutex to be released* Unlock a mutex that has been locked by this task previously.* This function must not be used in interrupt context. Unlocking* of a not locked mutex is not allowed.
1009  返回:err
调用者
名称描述
audit_rule_changeaudit_rule_change - apply all rules to the specified message type*@type: audit message type*@seq: netlink audit message sequence (serial) number*@data: payload data*@datasz: size of payload data