函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\auditsc.c Create Date:2022-07-27 12:31:19
Last Modify:2020-03-17 16:31:21 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称：Copy inode data into an audit_names.

函数原型：static void audit_copy_inode(struct audit_names *name, const struct dentry *dentry, struct inode *inode, unsigned int flags)

返回类型：void

参数：

类型参数名称
struct audit_names *name
const struct dentry *dentry
struct inode *inode
unsigned intflags
1924  ino等于Stat data, not accessed from path walking
1925  dev等于s_dev
1926  mode等于i_mode
1927  uid等于i_uid
1928  gid等于i_gid
1929  rdev等于i_rdev
1930  security_inode_getsecid(inode, & osid)
1931  如果flags按位与audit record incomplete 则
1932  fcap_ver等于负1
1933  返回
1935  audit_copy_fcaps(name, dentry)
调用者
名称描述
__audit_inode__audit_inode - store the inode and device from a lookup*@name: name being audited*@dentry: dentry being audited*@flags: attributes for this particular entry
__audit_inode_child__audit_inode_child - collect inode info for created/removed objects*@parent: inode of dentry parent*@dentry: dentry being audited*@type: AUDIT_TYPE_* value that we're looking for* For syscalls that create or remove filesystem objects, audit_inode