Lines Matching refs:krule
143 static inline int audit_to_inode(struct audit_krule *krule,
146 if (krule->listnr != AUDIT_FILTER_EXIT ||
147 krule->watch || krule->inode_f || krule->tree ||
151 krule->inode_f = f;
571 static struct audit_rule *audit_krule_to_rule(struct audit_krule *krule)
580 rule->flags = krule->flags | krule->listnr;
581 rule->action = krule->action;
582 rule->field_count = krule->field_count;
584 rule->values[i] = krule->fields[i].val;
585 rule->fields[i] = krule->fields[i].type;
587 if (krule->vers_ops == 1) {
588 if (krule->fields[i].op == Audit_not_equal)
591 rule->fields[i] |= audit_ops[krule->fields[i].op];
594 for (i = 0; i < AUDIT_BITMASK_SIZE; i++) rule->mask[i] = krule->mask[i];
600 static struct audit_rule_data *audit_krule_to_data(struct audit_krule *krule)
606 data = kmalloc(sizeof(*data) + krule->buflen, GFP_KERNEL);
611 data->flags = krule->flags | krule->listnr;
612 data->action = krule->action;
613 data->field_count = krule->field_count;
616 struct audit_field *f = &krule->fields[i];
637 audit_watch_path(krule->watch));
642 audit_tree_path(krule->tree));
646 audit_pack_string(&bufp, krule->filterkey);
652 for (i = 0; i < AUDIT_BITMASK_SIZE; i++) data->mask[i] = krule->mask[i];