Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\auditfilter.c Create Date:2022-07-28 11:25:33
Last Modify:2020-03-12 14:18:49 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:audit_compare_dname_path - compare given dentry name with last component in* given path. Return of 0 indicates a match.*@dname: dentry name that we're comparing*@path: full pathname that we're comparing*@parentlen: length of the parent if known

Proto:int audit_compare_dname_path(const struct qstr *dname, const char *path, int parentlen)

Type:int

Parameter:

TypeParameterName
const struct qstr *dname
const char *path
intparentlen
1308  dlen = len
1309  pathlen = strlen - Find the length of a string*@s: The string to be sized
1310  If pathlen < dlen Then Return 1
1313  parentlen = If parentlen == Indicates that audit should log the full pathname. Then parent_len - find the length of the parent portion of a pathname*@path: pathname of which to determine length Else parentlen
1314  If pathlen - parentlen != dlen Then Return 1
1317  p = path + parentlen
1319  Return strncmp(p, name, dlen)
Caller
NameDescribe
__audit_inode_child__audit_inode_child - collect inode info for created/removed objects*@parent: inode of dentry parent*@dentry: dentry being audited*@type: AUDIT_TYPE_* value that we're looking for* For syscalls that create or remove filesystem objects, audit_inode
audit_update_watchUpdate inode info in audit rules based on filesystem event.
audit_mark_handle_eventUpdate mark data in audit rules based on fsnotify events.