Lines Matching refs:watch
76 if (erule->watch)
77 audit_put_watch(erule->watch);
147 krule->watch || krule->inode_f || krule->tree ||
637 audit_watch_path(krule->watch));
689 if (strcmp(audit_watch_path(a->watch),
690 audit_watch_path(b->watch)))
745 * of the watch - that pointer is carried over. The LSM specific fields
814 if (old->watch) {
815 audit_get_watch(old->watch);
816 new->watch = old->watch;
834 } else if (entry->rule.watch) {
866 struct audit_watch *watch = entry->rule.watch;
890 if (watch) {
936 if (watch)
937 audit_put_watch(watch); /* tmp watch, matches initial get */
945 struct audit_watch *watch = entry->rule.watch;
966 if (e->rule.watch)
986 if (watch)
987 audit_put_watch(watch); /* match initial get */
1329 if (r->watch)
1334 if (r->watch || r->tree)