Lines Matching refs:audit_krule
33 * audit_krule holds a reference to its associated watch.
178 int audit_to_watch(struct audit_krule *krule, char *path, int len, u32 op)
227 static void audit_watch_log_rule_change(struct audit_krule *r, struct audit_watch *w, char *op)
250 struct audit_krule *r, *nextr;
325 struct audit_krule *r, *nextr;
365 static void audit_add_to_parent(struct audit_krule *krule,
400 int audit_add_watch(struct audit_krule *krule, struct list_head **list)
447 void audit_remove_watch_rule(struct audit_krule *krule)
505 int audit_dupe_exe(struct audit_krule *new, struct audit_krule *old)