Lines Matching refs:audit_watch
0 /* audit_watch.c -- watching inodes
39 * event. Each audit_watch holds a reference to its associated parent.
41 * audit_watch: if added to lists, lifetime is from audit_init_watch() to
42 * audit_remove_watch(). Additionally, an audit_watch may exist
47 struct audit_watch {
58 struct list_head watches; /* anchor for audit_watch->wlist */
111 void audit_get_watch(struct audit_watch *watch)
116 void audit_put_watch(struct audit_watch *watch)
126 void audit_remove_watch(struct audit_watch *watch)
134 char *audit_watch_path(struct audit_watch *watch)
139 int audit_watch_compare(struct audit_watch *watch, unsigned long ino, dev_t dev)
171 static struct audit_watch *audit_init_watch(char *path)
173 struct audit_watch *watch;
191 struct audit_watch *watch;
214 static struct audit_watch *audit_dupe_watch(struct audit_watch *old)
217 struct audit_watch *new;
238 static void audit_watch_log_rule_change(struct audit_krule *r, struct audit_watch *w, char *op)
260 struct audit_watch *owatch, *nwatch, *nextw;
334 struct audit_watch *w, *nextw;
408 struct audit_watch *w, *watch = krule->watch;
441 struct audit_watch *watch = krule->watch;
489 struct audit_watch *watch = krule->watch;