Lines Matching defs:audit_watch
2 /* audit_watch.c -- watching inodes
28 * event. Each audit_watch holds a reference to its associated parent.
30 * audit_watch: if added to lists, lifetime is from audit_init_watch() to
31 * audit_remove_watch(). Additionally, an audit_watch may exist
36 struct audit_watch {
47 struct list_head watches; /* anchor for audit_watch->wlist */
100 void audit_get_watch(struct audit_watch *watch)
105 void audit_put_watch(struct audit_watch *watch)
115 static void audit_remove_watch(struct audit_watch *watch)
123 char *audit_watch_path(struct audit_watch *watch)
128 int audit_watch_compare(struct audit_watch *watch, unsigned long ino, dev_t dev)
160 static struct audit_watch *audit_init_watch(char *path)
162 struct audit_watch *watch;
180 struct audit_watch *watch;
203 static struct audit_watch *audit_dupe_watch(struct audit_watch *old)
206 struct audit_watch *new;
227 static void audit_watch_log_rule_change(struct audit_krule *r, struct audit_watch *w, char *op)
249 struct audit_watch *owatch, *nwatch, *nextw;
324 struct audit_watch *w, *nextw;
348 static int audit_get_nd(struct audit_watch *watch, struct path *parent)
368 struct audit_watch *w, *watch = krule->watch;
402 struct audit_watch *watch = krule->watch;
449 struct audit_watch *watch = krule->watch;