Lines Matching refs:krule
153 static inline int audit_to_inode(struct audit_krule *krule, in audit_to_inode() argument
156 if ((krule->listnr != AUDIT_FILTER_EXIT && in audit_to_inode()
157 krule->listnr != AUDIT_FILTER_URING_EXIT) || in audit_to_inode()
158 krule->inode_f || krule->watch || krule->tree || in audit_to_inode()
162 krule->inode_f = f; in audit_to_inode()
634 static struct audit_rule_data *audit_krule_to_data(struct audit_krule *krule) in audit_krule_to_data() argument
640 data = kmalloc(struct_size(data, buf, krule->buflen), GFP_KERNEL); in audit_krule_to_data()
645 data->flags = krule->flags | krule->listnr; in audit_krule_to_data()
646 data->action = krule->action; in audit_krule_to_data()
647 data->field_count = krule->field_count; in audit_krule_to_data()
650 struct audit_field *f = &krule->fields[i]; in audit_krule_to_data()
671 audit_watch_path(krule->watch)); in audit_krule_to_data()
676 audit_tree_path(krule->tree)); in audit_krule_to_data()
680 audit_pack_string(&bufp, krule->filterkey); in audit_krule_to_data()
684 audit_pack_string(&bufp, audit_mark_path(krule->exe)); in audit_krule_to_data()
687 if (krule->pflags & AUDIT_LOGINUID_LEGACY && !f->val) { in audit_krule_to_data()
697 for (i = 0; i < AUDIT_BITMASK_SIZE; i++) data->mask[i] = krule->mask[i]; in audit_krule_to_data()