Lines Matching refs:krule
191 int audit_to_watch(struct audit_krule *krule, char *path, int len, u32 op) in audit_to_watch() argument
199 krule->listnr != AUDIT_FILTER_EXIT || in audit_to_watch()
201 krule->inode_f || krule->watch || krule->tree) in audit_to_watch()
208 krule->watch = watch; in audit_to_watch()
381 static void audit_add_to_parent(struct audit_krule *krule, in audit_add_to_parent() argument
384 struct audit_watch *w, *watch = krule->watch; in audit_add_to_parent()
399 krule->watch = watch = w; in audit_add_to_parent()
411 list_add(&krule->rlist, &watch->rules); in audit_add_to_parent()
416 int audit_add_watch(struct audit_krule *krule, struct list_head **list) in audit_add_watch() argument
418 struct audit_watch *watch = krule->watch; in audit_add_watch()
453 audit_add_to_parent(krule, parent); in audit_add_watch()
463 void audit_remove_watch_rule(struct audit_krule *krule) in audit_remove_watch_rule() argument
465 struct audit_watch *watch = krule->watch; in audit_remove_watch_rule()
468 list_del(&krule->rlist); in audit_remove_watch_rule()