linux-master/kernel/audit_watch.c

2 /* audit_watch.c -- watching inodes
28  * 	event.  Each audit_watch holds a reference to its associated parent.
30  * audit_watch: if added to lists, lifetime is from audit_init_watch() to
31  * 	audit_remove_watch().  Additionally, an audit_watch may exist
36 struct audit_watch {
47 	struct list_head	watches; /* anchor for audit_watch->wlist */
100 void audit_get_watch(struct audit_watch *watch)
105 void audit_put_watch(struct audit_watch *watch)
115 static void audit_remove_watch(struct audit_watch *watch)
123 char *audit_watch_path(struct audit_watch *watch)
128 int audit_watch_compare(struct audit_watch *watch, unsigned long ino, dev_t dev)
160 static struct audit_watch *audit_init_watch(char *path)
162 	struct audit_watch *watch;
180 	struct audit_watch *watch;
203 static struct audit_watch *audit_dupe_watch(struct audit_watch *old)
206 	struct audit_watch *new;
227 static void audit_watch_log_rule_change(struct audit_krule *r, struct audit_watch *w, char *op)
249 	struct audit_watch *owatch, *nwatch, *nextw;
324 	struct audit_watch *w, *nextw;
348 static int audit_get_nd(struct audit_watch *watch, struct path *parent)
368 	struct audit_watch *w, *watch = krule->watch;
402 	struct audit_watch *watch = krule->watch;
449 	struct audit_watch *watch = krule->watch;