Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\auditsc.c Create Date:2022-07-28 11:28:01
Last Modify:2020-03-17 16:31:21 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:Copy inode data into an audit_names.

Proto:static void audit_copy_inode(struct audit_names *name, const struct dentry *dentry, struct inode *inode, unsigned int flags)

Type:void

Parameter:

TypeParameterName
struct audit_names *name
const struct dentry *dentry
struct inode *inode
unsigned intflags
1924  ino = Stat data, not accessed from path walking
1925  dev = s_dev
1926  mode = i_mode
1927  uid = i_uid
1928  gid = i_gid
1929  rdev = i_rdev
1930  security_inode_getsecid(inode, & osid)
1931  If flags & audit record incomplete Then
1932  fcap_ver = -1
1933  Return
1935  audit_copy_fcaps(name, dentry)
Caller
NameDescribe
__audit_inode__audit_inode - store the inode and device from a lookup*@name: name being audited*@dentry: dentry being audited*@flags: attributes for this particular entry
__audit_inode_child__audit_inode_child - collect inode info for created/removed objects*@parent: inode of dentry parent*@dentry: dentry being audited*@type: AUDIT_TYPE_* value that we're looking for* For syscalls that create or remove filesystem objects, audit_inode