linux-master/kernel/auditsc.c

755 		if (rule->filterkey) {
756 			kfree(ctx->filterkey);
757 			ctx->filterkey = kstrdup(rule->filterkey, GFP_ATOMIC);
786 				*key = kstrdup(e->rule.filterkey, GFP_ATOMIC);
989 	 *       - we preserve "filterkey" if "state" is AUDIT_STATE_RECORD
1005 		kfree(ctx->filterkey);
1006 		ctx->filterkey = NULL;
1076 	context->filterkey = key;
1089 	kfree(context->filterkey);
1674 	audit_log_key(ab, ctx->filterkey);
1710 		audit_log_key(ab, context->filterkey);
1984 	/* run through both filters to ensure we set the filterkey properly */
2073 	/* run through both filters to ensure we set the filterkey properly */