Lines Matching refs:rule
279 oentry = container_of(r, struct audit_entry, rule);
280 list_del(&oentry->rule.rlist);
283 nentry = audit_dupe_rule(&oentry->rule);
285 list_del(&oentry->rule.list);
291 * nentry->rule.watch == oentry->rule.watch so
295 audit_put_watch(nentry->rule.watch);
297 nentry->rule.watch = nwatch;
298 list_add(&nentry->rule.rlist, &nwatch->rules);
300 list_replace(&oentry->rule.list,
301 &nentry->rule.list);
303 if (oentry->rule.exe)
304 audit_remove_mark(oentry->rule.exe);
331 e = container_of(r, struct audit_entry, rule);
333 if (e->rule.exe)
334 audit_remove_mark(e->rule.exe);
363 /* Associate the given rule with an existing parent.