Lines Matching refs:rule
169 struct aa_audit_rule *rule = vrule; in aa_audit_rule_free() local
171 if (rule) { in aa_audit_rule_free()
172 if (!IS_ERR(rule->label)) in aa_audit_rule_free()
173 aa_put_label(rule->label); in aa_audit_rule_free()
174 kfree(rule); in aa_audit_rule_free()
180 struct aa_audit_rule *rule; in aa_audit_rule_init() local
191 rule = kzalloc(sizeof(struct aa_audit_rule), GFP_KERNEL); in aa_audit_rule_init()
193 if (!rule) in aa_audit_rule_init()
197 rule->label = aa_label_parse(&root_ns->unconfined->label, rulestr, in aa_audit_rule_init()
199 if (IS_ERR(rule->label)) { in aa_audit_rule_init()
200 aa_audit_rule_free(rule); in aa_audit_rule_init()
201 return PTR_ERR(rule->label); in aa_audit_rule_init()
204 *vrule = rule; in aa_audit_rule_init()
208 int aa_audit_rule_known(struct audit_krule *rule) in aa_audit_rule_known() argument
212 for (i = 0; i < rule->field_count; i++) { in aa_audit_rule_known()
213 struct audit_field *f = &rule->fields[i]; in aa_audit_rule_known()
226 struct aa_audit_rule *rule = vrule; in aa_audit_rule_match() local
235 if (aa_label_is_subset(label, rule->label)) in aa_audit_rule_match()