audit.h File Reference

Go to the source code of this file.

Functions
int	selinux_audit_rule_init (u32 field, u32 op, char *rulestr, void **rule)
void	selinux_audit_rule_free (void *rule)
int	selinux_audit_rule_match (u32 sid, u32 field, u32 op, void *rule, struct audit_context *actx)
int	selinux_audit_rule_known (struct audit_krule *krule)

Function Documentation

void selinux_audit_rule_free

(

void *

rule

)

selinux_audit_rule_free - free an selinux audit rule structure. : pointer to the audit rule to be freed

This will free all memory associated with the given rule. If is NULL, no operation is performed.

Definition at line 2802 of file services.c.

int selinux_audit_rule_init	(	u32	field,
		u32	op,
		char *	rulestr,
		void **	rule
	)

selinux_audit_rule_init - alloc/init an selinux audit rule structure. : the field this rule refers to : the operater the rule uses : the text "target" of the rule : pointer to the new rule structure returned via this

Returns 0 if successful, -errno if not. On success, the rule structure will be allocated internally. The caller must free this structure with selinux_audit_rule_free() after use.

Definition at line 2812 of file services.c.

int selinux_audit_rule_known

(

struct audit_krule *

krule

)

selinux_audit_rule_known - check to see if rule contains selinux fields. : rule to be checked Returns 1 if there are selinux fields specified in the rule, 0 otherwise.

Definition at line 2909 of file services.c.

int selinux_audit_rule_match	(	u32	sid,
		u32	field,
		u32	op,
		void *	rule,
		struct audit_context *	actx
	)

selinux_audit_rule_match - determine if a context ID matches a rule. : the context ID to check : the field this rule refers to : the operater the rule uses : pointer to the audit rule to check against : the audit context (can be NULL) associated with the check

Returns 1 if the context id matches the rule, 0 if it does not, and -errno on failure.

Definition at line 2933 of file services.c.