Searched refs:filterkey (Results 1 – 7 of 7) sorted by relevance
| /Linux-v5.4/kernel/ |
| D | auditfilter.c | 93 kfree(erule->filterkey); in audit_free_rule()
563 if (entry->rule.filterkey || f->val > AUDIT_MAX_KEY_LEN) in audit_data_to_entry()
569 entry->rule.filterkey = str; in audit_data_to_entry()
665 audit_pack_string(&bufp, krule->filterkey); in audit_krule_to_data()
731 if (strcmp(a->filterkey, b->filterkey)) in audit_compare_rule()
856 fk = kstrdup(old->filterkey, GFP_KERNEL); in audit_dupe_rule()
860 new->filterkey = fk; in audit_dupe_rule()
1104 audit_log_key(ab, rule->filterkey); in audit_log_rule_change()
|
| D | auditsc.c | 719 if (rule->filterkey) { in audit_filter_rules()
720 kfree(ctx->filterkey); in audit_filter_rules()
721 ctx->filterkey = kstrdup(rule->filterkey, GFP_ATOMIC); in audit_filter_rules()
750 *key = kstrdup(e->rule.filterkey, GFP_ATOMIC); in audit_filter_task()
935 context->filterkey = key; in audit_alloc()
949 kfree(context->filterkey); in audit_free_context()
1475 audit_log_key(ab, context->filterkey); in audit_log_exit()
1731 kfree(context->filterkey); in __audit_syscall_exit()
1732 context->filterkey = NULL; in __audit_syscall_exit()
|
| D | audit_fsnotify.c | 127 audit_log_key(ab, rule->filterkey); in audit_mark_log_rule_change()
|
| D | audit.h | 120 char *filterkey; /* key for rule that triggered record */ member
|
| D | audit_watch.c | 238 audit_log_key(ab, r->filterkey); in audit_watch_log_rule_change()
|
| D | audit_tree.c | 539 audit_log_key(ab, rule->filterkey); in audit_tree_log_remove_rule()
|
| /Linux-v5.4/include/linux/ |
| D | audit.h | 45 char *filterkey; /* ties events to rules */ member
|
