Lines Matching refs:rule
173 struct aa_audit_rule *rule = vrule; in aa_audit_rule_free() local
175 if (rule) { in aa_audit_rule_free()
176 if (!IS_ERR(rule->label)) in aa_audit_rule_free()
177 aa_put_label(rule->label); in aa_audit_rule_free()
178 kfree(rule); in aa_audit_rule_free()
184 struct aa_audit_rule *rule; in aa_audit_rule_init() local
195 rule = kzalloc(sizeof(struct aa_audit_rule), GFP_KERNEL); in aa_audit_rule_init()
197 if (!rule) in aa_audit_rule_init()
201 rule->label = aa_label_parse(&root_ns->unconfined->label, rulestr, in aa_audit_rule_init()
203 if (IS_ERR(rule->label)) { in aa_audit_rule_init()
204 aa_audit_rule_free(rule); in aa_audit_rule_init()
205 return PTR_ERR(rule->label); in aa_audit_rule_init()
208 *vrule = rule; in aa_audit_rule_init()
212 int aa_audit_rule_known(struct audit_krule *rule) in aa_audit_rule_known() argument
216 for (i = 0; i < rule->field_count; i++) { in aa_audit_rule_known()
217 struct audit_field *f = &rule->fields[i]; in aa_audit_rule_known()
231 struct aa_audit_rule *rule = vrule; in aa_audit_rule_match() local
240 if (aa_label_is_subset(label, rule->label)) in aa_audit_rule_match()