audit_watch.c File Reference

#include <linux/kernel.h>
#include <linux/audit.h>
#include <linux/kthread.h>
#include <linux/mutex.h>
#include <linux/fs.h>
#include <linux/fsnotify_backend.h>
#include <linux/namei.h>
#include <linux/netlink.h>
#include <linux/sched.h>
#include <linux/slab.h>
#include <linux/security.h>
#include "audit.h"

Go to the source code of this file.

Data Structures
struct	audit_watch
struct	audit_parent

Macros
#define	AUDIT_FS_WATCH

Functions
void	audit_get_watch (struct audit_watch *watch)
void	audit_put_watch (struct audit_watch *watch)
char *	audit_watch_path (struct audit_watch *watch)
int	audit_watch_compare (struct audit_watch *watch, unsigned long ino, dev_t dev)
int	audit_to_watch (struct audit_krule *krule, char *path, int len, u32 op)
int	audit_add_watch (struct audit_krule *krule, struct list_head **list)
void	audit_remove_watch_rule (struct audit_krule *krule)
	device_initcall (audit_watch_init)

Macro Definition Documentation

#define AUDIT_FS_WATCH

Value:

(FS_MOVE | FS_CREATE | FS_DELETE | FS_DELETE_SELF |\
            FS_MOVE_SELF | FS_EVENT_ON_CHILD)

Definition at line 66 of file audit_watch.c.

Function Documentation

int audit_add_watch	(	struct audit_krule *	krule,
		struct list_head **	list
	)

Definition at line 408 of file audit_watch.c.

void audit_get_watch

(

struct audit_watch *

watch

)

Definition at line 111 of file audit_watch.c.

void audit_put_watch

(

struct audit_watch *

watch

)

Definition at line 116 of file audit_watch.c.

void audit_remove_watch_rule

(

struct audit_krule *

krule

)

Definition at line 448 of file audit_watch.c.

int audit_to_watch	(	struct audit_krule *	krule,
		char *	path,
		int	len,
		u32	op
	)

Definition at line 189 of file audit_watch.c.

int audit_watch_compare	(	struct audit_watch *	watch,
		unsigned long	ino,
		dev_t	dev
	)

Definition at line 139 of file audit_watch.c.

char* audit_watch_path

(

struct audit_watch *

watch

)

Definition at line 134 of file audit_watch.c.

device_initcall

(

audit_watch_init

)