Lines Matching refs:krule
54 struct list_head rules; /* anchor for krule->rlist */
189 int audit_to_watch(struct audit_krule *krule, char *path, int len, u32 op)
197 krule->listnr != AUDIT_FILTER_EXIT ||
199 krule->inode_f || krule->watch || krule->tree)
207 krule->watch = watch;
405 static void audit_add_to_parent(struct audit_krule *krule,
408 struct audit_watch *w, *watch = krule->watch;
419 /* put krule's and initial refs to temporary watch */
424 krule->watch = watch = w;
434 list_add(&krule->rlist, &watch->rules);
439 int audit_add_watch(struct audit_krule *krule, struct list_head **list)
441 struct audit_watch *watch = krule->watch;
474 audit_add_to_parent(krule, parent);
487 void audit_remove_watch_rule(struct audit_krule *krule)
489 struct audit_watch *watch = krule->watch;
492 list_del(&krule->rlist);