| /kernel/linux/linux-5.10/kernel/ |
| H A D | audit.h | 48 struct audit_krule rule;
245 extern struct audit_entry *audit_dupe_rule(struct audit_krule *old);
261 extern int audit_to_watch(struct audit_krule *krule, char *path, int len,
263 extern int audit_add_watch(struct audit_krule *krule, struct list_head **list);
264 extern void audit_remove_watch_rule(struct audit_krule *krule);
269 extern struct audit_fsnotify_mark *audit_alloc_mark(struct audit_krule *krule,
273 extern void audit_remove_mark_rule(struct audit_krule *krule);
276 extern int audit_dupe_exe(struct audit_krule *new, struct audit_krule *old);
284 extern int audit_make_tree(struct audit_krule *rul
[all...] |
| H A D | audit_fsnotify.c | 31 struct audit_krule *rule;
74 struct audit_fsnotify_mark *audit_alloc_mark(struct audit_krule *krule, char *pathname, int len) in audit_alloc_mark()
118 struct audit_krule *rule = audit_mark->rule; in audit_mark_log_rule_change()
139 void audit_remove_mark_rule(struct audit_krule *krule) in audit_remove_mark_rule()
148 struct audit_krule *rule = audit_mark->rule; in audit_autoremove_mark_rule()
|
| H A D | audit_watch.c | 33 * audit_krule holds a reference to its associated watch.
178 int audit_to_watch(struct audit_krule *krule, char *path, int len, u32 op) in audit_to_watch()
226 static void audit_watch_log_rule_change(struct audit_krule *r, struct audit_watch *w, char *op) in audit_watch_log_rule_change()
249 struct audit_krule *r, *nextr; in audit_update_watch()
324 struct audit_krule *r, *nextr; in audit_remove_parent_watches()
364 static void audit_add_to_parent(struct audit_krule *krule, in audit_add_to_parent()
399 int audit_add_watch(struct audit_krule *krule, struct list_head **list) in audit_add_watch()
446 void audit_remove_watch_rule(struct audit_krule *krule) in audit_remove_watch_rule()
505 int audit_dupe_exe(struct audit_krule *new, struct audit_krule *ol
[all...] |
| H A D | auditfilter.c | 84 struct audit_krule *erule = &e->rule; in audit_free_rule()
151 static inline int audit_to_inode(struct audit_krule *krule, in audit_to_inode()
626 static struct audit_rule_data *audit_krule_to_data(struct audit_krule *krule) in audit_krule_to_data()
696 static int audit_compare_rule(struct audit_krule *a, struct audit_krule *b) in audit_compare_rule()
811 struct audit_entry *audit_dupe_rule(struct audit_krule *old) in audit_dupe_rule()
815 struct audit_krule *new; in audit_dupe_rule()
1072 struct audit_krule *r; in audit_list_rules()
1098 static void audit_log_rule_change(char *action, struct audit_krule *rule, int res) in audit_log_rule_change()
1391 static int update_lsm_rule(struct audit_krule *
[all...] |
| H A D | audit_tree.c | 526 struct audit_krule *rule) in audit_tree_log_remove_rule()
544 struct audit_krule *rule, *next; in kill_rules()
647 int audit_remove_tree_rule(struct audit_krule *rule) in audit_remove_tree_rule()
726 int audit_make_tree(struct audit_krule *rule, char *pathname, u32 op) in audit_make_tree()
800 int audit_add_tree_rule(struct audit_krule *rule) in audit_add_tree_rule()
|
| H A D | auditsc.c | 468 struct audit_krule *rule, in audit_filter_rules()
788 static int audit_in_mask(const struct audit_krule *rule, unsigned long val) in audit_in_mask()
|
| /kernel/linux/linux-6.6/kernel/ |
| H A D | audit.h | 52 struct audit_krule rule;
253 extern struct audit_entry *audit_dupe_rule(struct audit_krule *old);
269 extern int audit_to_watch(struct audit_krule *krule, char *path, int len,
271 extern int audit_add_watch(struct audit_krule *krule, struct list_head **list);
272 extern void audit_remove_watch_rule(struct audit_krule *krule);
277 extern struct audit_fsnotify_mark *audit_alloc_mark(struct audit_krule *krule,
281 extern void audit_remove_mark_rule(struct audit_krule *krule);
284 extern int audit_dupe_exe(struct audit_krule *new, struct audit_krule *old);
292 extern int audit_make_tree(struct audit_krule *rul
[all...] |
| H A D | audit_fsnotify.c | 31 struct audit_krule *rule;
74 struct audit_fsnotify_mark *audit_alloc_mark(struct audit_krule *krule, char *pathname, int len) in audit_alloc_mark()
118 struct audit_krule *rule = audit_mark->rule; in audit_mark_log_rule_change()
139 void audit_remove_mark_rule(struct audit_krule *krule) in audit_remove_mark_rule()
148 struct audit_krule *rule = audit_mark->rule; in audit_autoremove_mark_rule()
|
| H A D | audit_watch.c | 33 * audit_krule holds a reference to its associated watch.
178 int audit_to_watch(struct audit_krule *krule, char *path, int len, u32 op) in audit_to_watch()
227 static void audit_watch_log_rule_change(struct audit_krule *r, struct audit_watch *w, char *op) in audit_watch_log_rule_change()
250 struct audit_krule *r, *nextr; in audit_update_watch()
325 struct audit_krule *r, *nextr; in audit_remove_parent_watches()
365 static void audit_add_to_parent(struct audit_krule *krule, in audit_add_to_parent()
400 int audit_add_watch(struct audit_krule *krule, struct list_head **list) in audit_add_watch()
447 void audit_remove_watch_rule(struct audit_krule *krule) in audit_remove_watch_rule()
505 int audit_dupe_exe(struct audit_krule *new, struct audit_krule *ol
[all...] |
| H A D | auditfilter.c | 86 struct audit_krule *erule = &e->rule; in audit_free_rule()
153 static inline int audit_to_inode(struct audit_krule *krule, in audit_to_inode()
634 static struct audit_rule_data *audit_krule_to_data(struct audit_krule *krule) in audit_krule_to_data()
705 static int audit_compare_rule(struct audit_krule *a, struct audit_krule *b) in audit_compare_rule()
820 struct audit_entry *audit_dupe_rule(struct audit_krule *old) in audit_dupe_rule()
824 struct audit_krule *new; in audit_dupe_rule()
1082 struct audit_krule *r; in audit_list_rules()
1108 static void audit_log_rule_change(char *action, struct audit_krule *rule, int res) in audit_log_rule_change()
1401 static int update_lsm_rule(struct audit_krule *
[all...] |
| H A D | audit_tree.c | 526 struct audit_krule *rule) in audit_tree_log_remove_rule()
544 struct audit_krule *rule, *next; in kill_rules()
647 int audit_remove_tree_rule(struct audit_krule *rule) in audit_remove_tree_rule()
725 int audit_make_tree(struct audit_krule *rule, char *pathname, u32 op) in audit_make_tree()
800 int audit_add_tree_rule(struct audit_krule *rule) in audit_add_tree_rule()
|
| H A D | auditsc.c | 465 struct audit_krule *rule, in audit_filter_rules()
795 static int audit_in_mask(const struct audit_krule *rule, unsigned long val) in audit_in_mask()
|
| /kernel/linux/linux-5.10/security/selinux/include/ |
| H A D | audit.h | 54 int selinux_audit_rule_known(struct audit_krule *krule);
|
| /kernel/linux/linux-6.6/security/selinux/include/ |
| H A D | audit.h | 57 int selinux_audit_rule_known(struct audit_krule *rule);
|
| /kernel/linux/linux-5.10/security/apparmor/include/ |
| H A D | audit.h | 190 int aa_audit_rule_known(struct audit_krule *rule);
|
| /kernel/linux/linux-6.6/security/apparmor/include/ |
| H A D | audit.h | 197 int aa_audit_rule_known(struct audit_krule *rule);
|
| /kernel/linux/linux-5.10/security/apparmor/ |
| H A D | audit.c | 207 int aa_audit_rule_known(struct audit_krule *rule) in aa_audit_rule_known()
|
| /kernel/linux/linux-6.6/security/apparmor/ |
| H A D | audit.c | 251 int aa_audit_rule_known(struct audit_krule *rule) in aa_audit_rule_known()
|
| /kernel/linux/linux-5.10/include/linux/ |
| H A D | audit.h | 38 struct audit_krule { struct
|
| H A D | security.h | 74 struct audit_krule;
1857 int security_audit_rule_known(struct audit_krule *krule);
1869 static inline int security_audit_rule_known(struct audit_krule *krule) in security_audit_rule_known()
|
| /kernel/linux/linux-6.6/include/linux/ |
| H A D | security.h | 75 struct audit_krule;
1957 int security_audit_rule_known(struct audit_krule *krule);
1969 static inline int security_audit_rule_known(struct audit_krule *krule) in security_audit_rule_known()
|
| H A D | audit.h | 40 struct audit_krule { struct
|
| /kernel/linux/linux-5.10/security/ |
| H A D | security.c | 2530 int security_audit_rule_known(struct audit_krule *krule) in security_audit_rule_known()
|
| /kernel/linux/linux-6.6/security/ |
| H A D | security.c | 5139 int security_audit_rule_known(struct audit_krule *krule) in security_audit_rule_known()
|
| /kernel/linux/linux-5.10/security/smack/ |
| H A D | smack_lsm.c | 4515 static int smack_audit_rule_known(struct audit_krule *krule) in smack_audit_rule_known()
|