Defined in 2 files as a function:
Referenced in 2 files:
Smatch caller information:
fs/tracefs/inode.c fsnotify_create() -> audit_inode_child()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | parent | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_alias.pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_flags | 0,134217728-u32max |
| PARAM_VALUE | 1 | dentry->d_hash.next | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_hash.pprev | 1-u64max |
| PARAM_VALUE | 1 | dentry->d_inode | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_sb | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_sb->s_op | 4096-ptr_max |
| PARAM_VALUE | 2 | type | 4 |
| BUF_SIZE | 1 | dentry | (-1),1-s32max |
| BUF_SIZE | 1 | dentry | (-1),1-s32max |
| DATA_SOURCE | 0 | parent | $0 |
| DATA_SOURCE | 1 | dentry | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 1 | dentry->d_inode->i_size | |
| HALF_LOCKED2 | _T->lock |
fs/tracefs/inode.c fsnotify_mkdir() -> audit_inode_child()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | parent | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_alias.pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_flags | 0,134217728-u32max |
| PARAM_VALUE | 1 | dentry->d_hash.next | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_hash.pprev | 1-u64max |
| PARAM_VALUE | 1 | dentry->d_inode | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_sb | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_sb->s_op | 4096-ptr_max |
| PARAM_VALUE | 2 | type | 4 |
| BUF_SIZE | 1 | dentry | (-1),1-s32max |
| BUF_SIZE | 1 | dentry | (-1),1-s32max |
| DATA_SOURCE | 0 | parent | $0 |
| DATA_SOURCE | 1 | dentry | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 1 | dentry->d_inode->i_size |
fs/tracefs/event_inode.c fsnotify_mkdir() -> audit_inode_child()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | parent | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_alias.pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_flags | 0,134217728-u32max |
| PARAM_VALUE | 1 | dentry->d_fsdata | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_hash.next | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_hash.pprev | 1-u64max |
| PARAM_VALUE | 1 | dentry->d_inode | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_sb | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_sb->s_op | 4096-ptr_max |
| PARAM_VALUE | 2 | type | 4 |
| BUF_SIZE | 1 | dentry | (-1),1-s32max |
| BUF_SIZE | 1 | dentry | (-1),1-s32max |
| BUF_SIZE | 1 | dentry->d_fsdata | 88 |
| DATA_SOURCE | 0 | parent | $0 |
| DATA_SOURCE | 1 | dentry | $1 |
| BIT_INFO | 1 | dentry->d_fsdata->nr_entries | 0x2,0xffffffffffffffff |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 1 | dentry->d_inode->i_size |
fs/namei.c atomic_open() -> audit_inode_child()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | parent | 4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_in_lookup_hash.next->pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_inode->i_data.host->i_sb->s_export_op->encode_fh | 0,1398972869330624512,1616549510479982592,2037984473558433792,2776440803454029824,3228746867770966016,3502492669594062848,3526768263295340544,3559173554394271744,5000850239487131648,5583386343686406144,5817357685191483392-s64max |
| PARAM_VALUE | 1 | dentry->d_inode->i_data.host->i_sb->s_export_op->fh_to_dentry | 0,447817974243774464,687732489194512384,742201802719268864,868497899885588480,1471448175530500096,2021658383390310400,2445877819203563520,2512819722689847296,2649270699546726400,2761259683714371584,2893332316235677696-s64max |
| PARAM_VALUE | 1 | dentry->d_inode->i_data.host->i_sb->s_export_op->get_parent | 0,264940071972966400,291591359766798336,565128213429456896,893189740598853632,1241177127089143808,1474696885321834496,1812477326828269568,1893665921928286208,2210088671756947456,2437012291923775488,2483979068402987008-s64max |
| PARAM_VALUE | 1 | dentry->d_inode->i_mapping->host->i_sb->s_export_op->fh_to_parent | 0,148606482432692224,436469935444291584,467281172929331200,529780027764285440,1092893949038768128,1556959531105513472,1608953577475584000,1649536479961075712,2404761408063094784,2970908329832960000,3511613614414655488-s64max |
| PARAM_VALUE | 1 | dentry->d_inode->i_sb->s_export_op->fh_to_parent | 0,148606482432692224,436469935444291584,467281172929331200,529780027764285440,1092893949038768128,1556959531105513472,1608953577475584000,1649536479961075712,2404761408063094784,2970908329832960000,3511613614414655488-s64max |
| PARAM_VALUE | 1 | dentry->d_op->d_automount | 0,2908707185815040000,3401111987815645184,6746145930460459008,7190988915944083456,7386785427940065280,8018779550845526016 |
| PARAM_VALUE | 1 | dentry->d_op->d_dname | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_init | 0,2385819921126617088,7057831443282669568,7824184004865302528 |
| PARAM_VALUE | 1 | dentry->d_op->d_iput | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_manage | 0,1859587847549206528 |
| PARAM_VALUE | 1 | dentry->d_op->d_prune | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_real | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_unalias_trylock | 0,6635409759016140800 |
| PARAM_VALUE | 1 | dentry->d_op->d_unalias_unlock | 0,6336447517789900800 |
| PARAM_VALUE | 1 | dentry->d_op->d_weak_revalidate | 0,1549882712720502784,5632434648052031488,5669063523602272256,7231033168839651328 |
| PARAM_VALUE | 2 | type | 4 |
| DATA_SOURCE | 1 | dentry | $1 [m] |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 1 | dentry->__d_name.hash | 0-u32max[c] |
| USER_DATA | 1 | dentry->d_parent->__d_name.hash | 0-u32max[c] |
| USER_DATA | 1 | dentry->d_sb->s_flags | 0-u64max[c] |
| USER_DATA | 1 | *dentry->__d_name.name | 0-255 |
| USER_DATA | 1 | *dentry->d_parent->__d_name.name | 0-255 |
| NO_OVERFLOW_SIMPLE | 1 | dentry->d_sb->s_blocksize | |
| NO_OVERFLOW_SIMPLE | 1 | dentry->d_sb->s_blocksize_bits | |
| USER_PTR | 1 | dentry->__d_name.name | |
| HALF_LOCKED2 | &dir_inode->i_rwsem | ||
| HALF_LOCKED2 | 1 | &dentry->d_lockref.lock |
fs/namei.c fsnotify_create() -> audit_inode_child()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | parent | 4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->atomic_open | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->create | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->mknod | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->symlink | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | parent->i_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | parent->i_sb->s_cop->inode_info_offs | 1632,1720,1808,2632,2648 |
| PARAM_VALUE | 1 | dentry | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_automount | 0,2908707185815040000,3401111987815645184,6746145930460459008,7190988915944083456,7386785427940065280,8018779550845526016 |
| PARAM_VALUE | 1 | dentry->d_op->d_dname | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_init | 0,2385819921126617088,7057831443282669568,7824184004865302528 |
| PARAM_VALUE | 1 | dentry->d_op->d_iput | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_manage | 0,1859587847549206528 |
| PARAM_VALUE | 1 | dentry->d_op->d_prune | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_real | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_unalias_trylock | 0,6635409759016140800 |
| PARAM_VALUE | 1 | dentry->d_op->d_unalias_unlock | 0,6336447517789900800 |
| PARAM_VALUE | 1 | dentry->d_op->d_weak_revalidate | 0,1549882712720502784,5632434648052031488,5669063523602272256,7231033168839651328 |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode->i_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode->i_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode->i_sb->s_cop->inode_info_offs | 1632,1720,1808,2632,2648 |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode->i_sb->s_export_op->encode_fh | 0,2,1398972869330624512,1616549510479982592,2037984473558433792,2776440803454029824,3228746867770966016,3502492669594062848,3526768263295340544,3559173554394271744,5000850239487131648,5583386343686406144,5817357685191483392-s64max |
| PARAM_VALUE | 2 | type | 4 |
| BUF_SIZE | 1 | dentry | (-1)-s32max |
| BUF_SIZE | 1 | dentry | (-1)-s32max |
| DATA_SOURCE | 0 | parent | $0 |
| DATA_SOURCE | 1 | dentry | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | parent->i_mode | 0-u16max |
| USER_DATA | 0 | parent->i_size | (-9223372036854775807)-(-4),0-s64max |
| USER_DATA | 1 | dentry->__d_name.hash | 0-u32max[c] |
| USER_DATA | 1 | dentry->d_inode->i_mode | 0-u16max |
| USER_DATA | 1 | dentry->d_parent->__d_name.hash | 0-u32max[c] |
| USER_DATA | 1 | dentry->d_sb->s_flags | 0-u64max[c] |
| USER_DATA | 1 | *dentry->__d_name.name | 0-255 |
| USER_DATA | 1 | *dentry->d_parent->__d_name.name | 0-255 |
| NO_OVERFLOW_SIMPLE | 1 | dentry->d_inode->i_blkbits | |
| NO_OVERFLOW_SIMPLE | 1 | dentry->d_inode->i_size | |
| NO_OVERFLOW_SIMPLE | 1 | dentry->d_sb->s_blocksize | |
| NO_OVERFLOW_SIMPLE | 1 | dentry->d_sb->s_blocksize_bits | |
| USER_PTR | 1 | dentry->__d_name.name | |
| HALF_LOCKED2 | 0 | &parent->i_rwsem | |
| HALF_LOCKED2 | 1 | &dentry->d_lockref.lock |
fs/namei.c fsnotify_link() -> audit_inode_child()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | parent | 4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_flctx->flc_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | parent->i_op | 4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->link | 4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->mknod | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | parent->i_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | parent->i_sb | 4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_sb->s_cop->inode_info_offs | 1632,1720,1808,2632,2648 |
| PARAM_VALUE | 1 | dentry | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_inode | 0 |
| PARAM_VALUE | 1 | dentry->d_inode->i_mapping->i_mmap_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 1 | dentry->d_inode->i_mapping->i_mmap_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 1 | dentry->d_inode->i_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 1 | dentry->d_inode->i_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode->i_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode->i_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 2 | type | 4 |
| BUF_SIZE | 1 | dentry | (-1),1-s32max |
| BUF_SIZE | 1 | dentry | (-1),1-s32max |
| CAPPED_DATA | 0 | parent->i_sb | 1 |
| CAPPED_DATA | 0 | parent->i_sb->s_user_ns->gid_map.nr_extents | 1 |
| CAPPED_DATA | 0 | parent->i_sb->s_user_ns->uid_map.nr_extents | 1 |
| DATA_SOURCE | 0 | parent | $0 |
| DATA_SOURCE | 1 | dentry | $2 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | parent->i_mode | 0-u16max |
| USER_DATA | 0 | parent->i_size | (-9223372036854775807)-(-4),0-s64max |
| HALF_LOCKED2 | &pool->lock |
fs/namei.c fsnotify_mkdir() -> audit_inode_child()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | parent | 4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_flctx->flc_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | parent->i_op | 4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->mkdir | 4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | parent->i_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | parent->i_sb | 4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_sb->s_cop->inode_info_offs | 1632,1720,1808,2632,2648 |
| PARAM_VALUE | 1 | dentry | 1-ptr_max |
| PARAM_VALUE | 1 | dentry->d_inode->i_dir_seq | 0 |
| PARAM_VALUE | 1 | dentry->d_inode->i_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 1 | dentry->d_inode->i_mapping->i_mmap_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 1 | dentry->d_inode->i_mapping->i_mmap_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 1 | dentry->d_inode->i_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 1 | dentry->d_inode->i_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 1 | dentry->d_op->d_dname | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_iput | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_prune | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_real | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode->i_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode->i_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_automount | 0,2908707185815040000,3401111987815645184,6746145930460459008,7190988915944083456,7386785427940065280,8018779550845526016 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_init | 0,2385819921126617088,7057831443282669568,7824184004865302528 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_iput | 0,170374395438985216,837750826476904448,5086081384299388928,8216155483032948736 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_manage | 0,1859587847549206528 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_prune | 0,2225594340392566784,7225953709177749504 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_real | 0,4509355519306412032 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_unalias_trylock | 0,6635409759016140800 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_unalias_unlock | 0,6336447517789900800 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_weak_revalidate | 0,1549882712720502784,5632434648052031488,5669063523602272256,7231033168839651328 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_automount | 0,2908707185815040000,3401111987815645184,6746145930460459008,7190988915944083456,7386785427940065280,8018779550845526016 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_init | 0,2385819921126617088,7057831443282669568,7824184004865302528 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_iput | 0,170374395438985216,837750826476904448,5086081384299388928,8216155483032948736 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_manage | 0,1859587847549206528 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_prune | 0,2225594340392566784,7225953709177749504 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_real | 0,4509355519306412032 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_unalias_trylock | 0,6635409759016140800 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_unalias_unlock | 0,6336447517789900800 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_weak_revalidate | 0,1549882712720502784,5632434648052031488,5669063523602272256,7231033168839651328 |
| PARAM_VALUE | 2 | type | 4 |
| BUF_SIZE | 0 | parent | (-1),1160 |
| BUF_SIZE | 0 | parent | (-1),1160 |
| BUF_SIZE | 1 | dentry | (-1)-s32max |
| BUF_SIZE | 1 | dentry | (-1)-s32max |
| CAPPED_DATA | 0 | parent->i_sb->s_user_ns->gid_map.nr_extents | 1 |
| CAPPED_DATA | 0 | parent->i_sb->s_user_ns->uid_map.nr_extents | 1 |
| DATA_SOURCE | 0 | parent | $0 |
| DATA_SOURCE | 1 | dentry | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | parent->i_mode | 0-u16max |
| USER_DATA | 0 | parent->i_size | (-9223372036854775807)-(-4),0-s64max |
| USER_DATA | 1 | dentry->d_inode->i_size | (-9223372036854775807)-(-4),0-s64max |
| HALF_LOCKED2 | 1 | &dentry->d_lockref.lock |
fs/namei.c fsnotify_move() -> audit_inode_child()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | parent | 4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_sb | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_inode | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_inode->i_sb | 4096-ptr_max |
| PARAM_VALUE | 2 | type | 4 |
| DATA_SOURCE | 0 | parent | $1 |
| DATA_SOURCE | 1 | dentry | $5 |
| NOCHECK_CALL |
fs/namei.c lookup_open() -> audit_inode_child()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | parent | 4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op | 4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->atomic_open | 0 |
| PARAM_VALUE | 0 | parent->i_op->create | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_rwsem.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | parent->i_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | parent->i_rwsem.first_waiter->list.next | 2212933610777083904,2624917664208203776 |
| PARAM_VALUE | 0 | parent->i_rwsem.first_waiter->list.prev | 2212933610777083904,2624917664208203776 |
| PARAM_VALUE | 0 | parent->i_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 1 | dentry | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_inode | 0 |
| PARAM_VALUE | 1 | dentry->d_inode->i_data.host->i_sb->s_export_op->encode_fh | 0,1398972869330624512,1616549510479982592,2037984473558433792,2776440803454029824,3228746867770966016,3502492669594062848,3526768263295340544,3559173554394271744,5000850239487131648,5583386343686406144,5817357685191483392-s64max |
| PARAM_VALUE | 1 | dentry->d_inode->i_data.host->i_sb->s_export_op->fh_to_dentry | 0,447817974243774464,687732489194512384,742201802719268864,868497899885588480,1471448175530500096,2021658383390310400,2445877819203563520,2512819722689847296,2649270699546726400,2761259683714371584,2893332316235677696-s64max |
| PARAM_VALUE | 1 | dentry->d_inode->i_data.host->i_sb->s_export_op->fh_to_parent | 0,148606482432692224,436469935444291584,467281172929331200,529780027764285440,1092893949038768128,1556959531105513472,1608953577475584000,1649536479961075712,2404761408063094784,2970908329832960000,3511613614414655488-s64max |
| PARAM_VALUE | 1 | dentry->d_inode->i_data.host->i_sb->s_export_op->get_parent | 0,264940071972966400,291591359766798336,565128213429456896,893189740598853632,1241177127089143808,1474696885321834496,1812477326828269568,1893665921928286208,2210088671756947456,2437012291923775488,2483979068402987008-s64max |
| PARAM_VALUE | 1 | dentry->d_inode->i_mapping->host->i_sb->s_export_op->encode_fh | 0,1398972869330624512,1616549510479982592,2037984473558433792,2776440803454029824,3228746867770966016,3502492669594062848,3526768263295340544,3559173554394271744,5000850239487131648,5583386343686406144,5817357685191483392-s64max |
| PARAM_VALUE | 1 | dentry->d_inode->i_mapping->host->i_sb->s_export_op->fh_to_dentry | 0,447817974243774464,687732489194512384,742201802719268864,868497899885588480,1471448175530500096,2021658383390310400,2445877819203563520,2512819722689847296,2649270699546726400,2761259683714371584,2893332316235677696-s64max |
| PARAM_VALUE | 1 | dentry->d_inode->i_mapping->host->i_sb->s_export_op->fh_to_parent | 0,148606482432692224,436469935444291584,467281172929331200,529780027764285440,1092893949038768128,1556959531105513472,1608953577475584000,1649536479961075712,2404761408063094784,2970908329832960000,3511613614414655488-s64max |
| PARAM_VALUE | 1 | dentry->d_inode->i_mapping->host->i_sb->s_export_op->get_parent | 0,264940071972966400,291591359766798336,565128213429456896,893189740598853632,1241177127089143808,1474696885321834496,1812477326828269568,1893665921928286208,2210088671756947456,2437012291923775488,2483979068402987008-s64max |
| PARAM_VALUE | 1 | dentry->d_inode->i_sb->s_cop->inode_info_offs | 1632,1720,2632,2648 |
| PARAM_VALUE | 1 | dentry->d_inode->i_sb->s_export_op->encode_fh | 0,1398972869330624512,1616549510479982592,2037984473558433792,2776440803454029824,3228746867770966016,3502492669594062848,3526768263295340544,3559173554394271744,5000850239487131648,5583386343686406144,5817357685191483392-s64max |
| PARAM_VALUE | 1 | dentry->d_inode->i_sb->s_export_op->fh_to_dentry | 0,447817974243774464,687732489194512384,742201802719268864,868497899885588480,1471448175530500096,2021658383390310400,2445877819203563520,2512819722689847296,2649270699546726400,2761259683714371584,2893332316235677696-s64max |
| PARAM_VALUE | 1 | dentry->d_inode->i_sb->s_export_op->fh_to_parent | 0,148606482432692224,436469935444291584,467281172929331200,529780027764285440,1092893949038768128,1556959531105513472,1608953577475584000,1649536479961075712,2404761408063094784,2970908329832960000,3511613614414655488-s64max |
| PARAM_VALUE | 1 | dentry->d_inode->i_sb->s_export_op->get_parent | 0,264940071972966400,291591359766798336,565128213429456896,893189740598853632,1241177127089143808,1474696885321834496,1812477326828269568,1893665921928286208,2210088671756947456,2437012291923775488,2483979068402987008-s64max |
| PARAM_VALUE | 1 | dentry->d_op->d_automount | 0,2908707185815040000,3401111987815645184,6746145930460459008,7190988915944083456,7386785427940065280,8018779550845526016 |
| PARAM_VALUE | 1 | dentry->d_op->d_dname | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_init | 0,2385819921126617088,7057831443282669568,7824184004865302528 |
| PARAM_VALUE | 1 | dentry->d_op->d_iput | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_manage | 0,1859587847549206528 |
| PARAM_VALUE | 1 | dentry->d_op->d_prune | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_real | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_unalias_trylock | 0,6635409759016140800 |
| PARAM_VALUE | 1 | dentry->d_op->d_unalias_unlock | 0,6336447517789900800 |
| PARAM_VALUE | 1 | dentry->d_op->d_weak_revalidate | 0,1549882712720502784,5632434648052031488,5669063523602272256,7231033168839651328 |
| PARAM_VALUE | 2 | type | 4 |
| BIT_INFO | 0 | parent->i_flags | 0x0,0xffffffef |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 1 | dentry->__d_name.hash | 0-u32max[c] |
| USER_DATA | 1 | dentry->d_inode->i_mode | 0-u16max |
| USER_DATA | 1 | dentry->d_parent->__d_name.hash | 0-u32max[c] |
| USER_DATA | 1 | dentry->d_sb->s_flags | 0-u64max[c] |
| USER_DATA | 1 | *dentry->__d_name.name | 0-255 |
| USER_DATA | 1 | *dentry->d_parent->__d_name.name | 0-255 |
| NO_OVERFLOW_SIMPLE | 1 | dentry->d_sb->s_blocksize | |
| NO_OVERFLOW_SIMPLE | 1 | dentry->d_sb->s_blocksize_bits | |
| USER_PTR | 1 | dentry->__d_name.name | |
| LOCK2 | 0 | &parent->i_rwsem | |
| HALF_LOCKED2 | 1 | &dentry->d_lockref.lock | |
| TYPE_LOCK | (struct inode)->i_rwsem |
fs/namei.c may_create_dentry() -> audit_inode_child()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | parent->i_op->mknod | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | parent->i_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | parent->i_sb->s_cop->inode_info_offs | 1632,1720,1808,2632,2648 |
| PARAM_VALUE | 1 | dentry->d_inode->i_mapping->i_mmap_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 1 | dentry->d_inode->i_mapping->i_mmap_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 1 | dentry->d_inode->i_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 1 | dentry->d_inode->i_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 1 | dentry->d_op->d_dname | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_iput | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_prune | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_real | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode->i_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode->i_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode->i_sb->s_cop->inode_info_offs | 1632,1720,1808,2632,2648 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_automount | 0,2908707185815040000,3401111987815645184,6746145930460459008,7190988915944083456,7386785427940065280,8018779550845526016 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_init | 0,2385819921126617088,7057831443282669568,7824184004865302528 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_iput | 0,170374395438985216,837750826476904448,5086081384299388928,8216155483032948736 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_manage | 0,1859587847549206528 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_prune | 0,2225594340392566784,7225953709177749504 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_real | 0,4509355519306412032 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_unalias_trylock | 0,6635409759016140800 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_unalias_unlock | 0,6336447517789900800 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_weak_revalidate | 0,1549882712720502784,5632434648052031488,5669063523602272256,7231033168839651328 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_automount | 0,2908707185815040000,3401111987815645184,6746145930460459008,7190988915944083456,7386785427940065280,8018779550845526016 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_init | 0,2385819921126617088,7057831443282669568,7824184004865302528 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_iput | 0,170374395438985216,837750826476904448,5086081384299388928,8216155483032948736 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_manage | 0,1859587847549206528 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_prune | 0,2225594340392566784,7225953709177749504 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_real | 0,4509355519306412032 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_unalias_trylock | 0,6635409759016140800 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_unalias_unlock | 0,6336447517789900800 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_weak_revalidate | 0,1549882712720502784,5632434648052031488,5669063523602272256,7231033168839651328 |
| PARAM_VALUE | 2 | type | 4 |
| BUF_SIZE | 0 | parent | (-1),1160 |
| BUF_SIZE | 0 | parent | (-1),1160 |
| BUF_SIZE | 1 | dentry | (-1)-s32max |
| BUF_SIZE | 1 | dentry | (-1)-s32max |
| DATA_SOURCE | 0 | parent | $1 |
| DATA_SOURCE | 1 | dentry | $2 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | parent->i_mode | 0-u16max |
| USER_DATA | 0 | parent->i_size | (-9223372036854775807)-(-4),0-s64max |
| USER_DATA | 1 | dentry->d_inode->i_mode | 0-u16max |
| USER_DATA | 1 | dentry->d_inode->i_size | (-9223372036854775807)-(-4),0-s64max |
| UNITS | 1 | dentry | unit_jiffy |
| HALF_LOCKED2 | 1 | &dentry->d_lockref.lock |
fs/namei.c may_delete_dentry() -> audit_inode_child()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | parent->i_op->unlink | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | parent->i_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | parent->i_sb->s_cop->inode_info_offs | 1632,1720,1808,2632,2648 |
| PARAM_VALUE | 1 | dentry | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_inode | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_inode->i_mapping->host->i_sb->s_cop->inode_info_offs | 1632,1720,1808,2632,2648,2712 |
| PARAM_VALUE | 1 | dentry->d_inode->i_mapping->i_mmap_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 1 | dentry->d_inode->i_mapping->i_mmap_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 1 | dentry->d_inode->i_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 1 | dentry->d_inode->i_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 1 | dentry->d_inode->i_sb | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_inode->i_sb->s_cop->inode_info_offs | 1632,1720,1808,2632,2648 |
| PARAM_VALUE | 1 | dentry->d_op->d_dname | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_iput | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_prune | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_real | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode->i_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode->i_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode->i_sb->s_cop->inode_info_offs | 1632,1720,1808,2632,2648 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_automount | 0,2908707185815040000,3401111987815645184,6746145930460459008,7190988915944083456,7386785427940065280,8018779550845526016 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_init | 0,2385819921126617088,7057831443282669568,7824184004865302528 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_iput | 0,170374395438985216,837750826476904448,5086081384299388928,8216155483032948736 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_manage | 0,1859587847549206528 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_prune | 0,2225594340392566784,7225953709177749504 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_real | 0,4509355519306412032 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_unalias_trylock | 0,6635409759016140800 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_unalias_unlock | 0,6336447517789900800 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_weak_revalidate | 0,1549882712720502784,5632434648052031488,5669063523602272256,7231033168839651328 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_automount | 0,2908707185815040000,3401111987815645184,6746145930460459008,7190988915944083456,7386785427940065280,8018779550845526016 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_init | 0,2385819921126617088,7057831443282669568,7824184004865302528 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_iput | 0,170374395438985216,837750826476904448,5086081384299388928,8216155483032948736 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_manage | 0,1859587847549206528 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_prune | 0,2225594340392566784,7225953709177749504 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_real | 0,4509355519306412032 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_unalias_trylock | 0,6635409759016140800 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_unalias_unlock | 0,6336447517789900800 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_weak_revalidate | 0,1549882712720502784,5632434648052031488,5669063523602272256,7231033168839651328 |
| PARAM_VALUE | 1 | dentry->d_sb->s_export_op->flags | 0,127 |
| PARAM_VALUE | 2 | type | 3 |
| BUF_SIZE | 1 | dentry | (-1)-s32max |
| BUF_SIZE | 1 | dentry | (-1)-s32max |
| CAPPED_DATA | 0 | parent | 1 |
| CAPPED_DATA | 1 | dentry->d_parent->d_inode | 1 |
| DATA_SOURCE | 0 | parent | $1 |
| DATA_SOURCE | 1 | dentry | $2 |
| PARAM_COMPARE | 0 | parent | == $1->d_parent->d_inode |
| PARAM_COMPARE | 0 | parent | == $1->d_parent->d_inode |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 1 | dentry->d_inode->i_mode | 0-u16max |
| USER_DATA | 1 | dentry->d_inode->i_size | (-9223372036854775807)-(-4),0-s64max |
| NO_OVERFLOW_SIMPLE | 1 | dentry->dentry->d_inode->i_size | |
| NO_OVERFLOW_SIMPLE | 1 | dentry->moved->d_inode->i_size | |
| UNITS | 1 | dentry | unit_jiffy |
| HALF_LOCKED2 | 0 | &parent->i_rwsem | |
| HALF_LOCKED2 | 1 | &dentry->d_lockref.lock | |
| HALF_LOCKED2 | 1 | &dentry->d_sb->s_vfs_rename_mutex |
fs/nfsd/nfsctl.c fsnotify_create() -> audit_inode_child()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | dentry | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_alias.pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_flags | 0,134217728-u32max |
| PARAM_VALUE | 1 | dentry->d_hash.pprev | 1-u64max |
| PARAM_VALUE | 1 | dentry->d_inode | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode->i_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode->i_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 2 | type | 4 |
| BUF_SIZE | 1 | dentry | (-1),1-s32max |
| BUF_SIZE | 1 | dentry | (-1),1-s32max |
| DATA_SOURCE | 0 | parent | $0 |
| DATA_SOURCE | 1 | dentry | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | parent->i_blkbits | |
| NO_OVERFLOW_SIMPLE | 0 | parent->i_size | |
| NO_OVERFLOW_SIMPLE | 1 | dentry->d_inode->i_size |
fs/nfsd/nfsctl.c fsnotify_mkdir() -> audit_inode_child()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | parent | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_alias.pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_flags | 0,134217728-u32max |
| PARAM_VALUE | 1 | dentry->d_hash.next | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_hash.pprev | 1-u64max |
| PARAM_VALUE | 1 | dentry->d_inode | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode | 4096-ptr_max |
| PARAM_VALUE | 2 | type | 4 |
| BUF_SIZE | 1 | dentry | (-1),1-s32max |
| BUF_SIZE | 1 | dentry | (-1),1-s32max |
| DATA_SOURCE | 0 | parent | $0 |
| DATA_SOURCE | 1 | dentry | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | parent->i_blkbits | |
| NO_OVERFLOW_SIMPLE | 0 | parent->i_size | |
| NO_OVERFLOW_SIMPLE | 1 | dentry->d_inode->i_size |
net/sunrpc/rpc_pipe.c fsnotify_create() -> audit_inode_child()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | parent | 4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_sb | 4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_sb->s_op | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_alias.pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_flags | 0,134217728-u32max |
| PARAM_VALUE | 1 | dentry->d_hash.next | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_hash.pprev | 1-u64max |
| PARAM_VALUE | 1 | dentry->d_inode | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode | 4096-ptr_max |
| PARAM_VALUE | 2 | type | 4 |
| BUF_SIZE | 1 | dentry | (-1),1-s32max |
| BUF_SIZE | 1 | dentry | (-1),1-s32max |
| DATA_SOURCE | 0 | parent | $0 |
| DATA_SOURCE | 1 | dentry | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | parent->i_blkbits | |
| NO_OVERFLOW_SIMPLE | 0 | parent->i_size | |
| NO_OVERFLOW_SIMPLE | 1 | dentry->d_inode->i_size |
net/sunrpc/rpc_pipe.c fsnotify_mkdir() -> audit_inode_child()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | parent | 4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_sb | 4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_sb->s_op | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_alias.pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_flags | 0,134217728-u32max |
| PARAM_VALUE | 1 | dentry->d_hash.next | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_hash.pprev | 1-u64max |
| PARAM_VALUE | 1 | dentry->d_inode | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode | 4096-ptr_max |
| PARAM_VALUE | 2 | type | 4 |
| BUF_SIZE | 1 | dentry | (-1),1-s32max |
| BUF_SIZE | 1 | dentry | (-1),1-s32max |
| DATA_SOURCE | 0 | parent | $0 |
| DATA_SOURCE | 1 | dentry | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | parent->i_blkbits | |
| NO_OVERFLOW_SIMPLE | 0 | parent->i_size | |
| NO_OVERFLOW_SIMPLE | 1 | dentry->d_inode->i_size |
drivers/android/binderfs.c fsnotify_create() -> audit_inode_child()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | dentry | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_alias.pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_flags | 0,134217728-u32max |
| PARAM_VALUE | 1 | dentry->d_hash.next | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_hash.pprev | 1-u64max |
| PARAM_VALUE | 1 | dentry->d_inode | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode | 4096-ptr_max |
| PARAM_VALUE | 2 | type | 4 |
| BUF_SIZE | 1 | dentry | (-1),1-s32max |
| BUF_SIZE | 1 | dentry | (-1),1-s32max |
| DATA_SOURCE | 0 | parent | $0 |
| DATA_SOURCE | 1 | dentry | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 1 | dentry->d_inode->i_size |
drivers/android/binderfs.c fsnotify_mkdir() -> audit_inode_child()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | parent | 4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_sb | 4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_sb->s_op | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_alias.pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_flags | 0,134217728-u32max |
| PARAM_VALUE | 1 | dentry->d_hash.next | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_hash.pprev | 1-u64max |
| PARAM_VALUE | 1 | dentry->d_inode | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode | 4096-ptr_max |
| PARAM_VALUE | 2 | type | 4 |
| BUF_SIZE | 1 | dentry | (-1),1-s32max |
| BUF_SIZE | 1 | dentry | (-1),1-s32max |
| DATA_SOURCE | 0 | parent | $0 |
| DATA_SOURCE | 1 | dentry | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 1 | dentry->d_inode->i_size | |
| HALF_LOCKED2 | &fc->uapi_mutex | ||
| HALF_LOCKED2 | &sb->s_umount |
fs/debugfs/inode.c fsnotify_create() -> audit_inode_child()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | parent | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_alias.pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_flags | 0,134217728-u32max |
| PARAM_VALUE | 1 | dentry->d_hash.next | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_hash.pprev | 1-u64max |
| PARAM_VALUE | 1 | dentry->d_inode | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_inode->i_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 1 | dentry->d_inode->i_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 1 | dentry->d_inode->i_sb->s_cop->inode_info_offs | 1632,1720,2632,2648 |
| PARAM_VALUE | 1 | dentry->d_inode->i_sb->s_export_op->encode_fh | 0,1398972869330624512,1616549510479982592,2037984473558433792,2776440803454029824,3228746867770966016,3502492669594062848,3526768263295340544,3559173554394271744,5000850239487131648,5583386343686406144,5817357685191483392-s64max |
| PARAM_VALUE | 1 | dentry->d_inode->i_sb->s_export_op->fh_to_dentry | 0,447817974243774464,687732489194512384,742201802719268864,868497899885588480,1471448175530500096,2021658383390310400,2445877819203563520,2512819722689847296,2649270699546726400,2761259683714371584,2893332316235677696-s64max |
| PARAM_VALUE | 1 | dentry->d_inode->i_sb->s_export_op->fh_to_parent | 0,148606482432692224,436469935444291584,467281172929331200,529780027764285440,1092893949038768128,1556959531105513472,1608953577475584000,1649536479961075712,2404761408063094784,2970908329832960000,3511613614414655488-s64max |
| PARAM_VALUE | 1 | dentry->d_inode->i_sb->s_export_op->get_parent | 0,264940071972966400,291591359766798336,565128213429456896,893189740598853632,1241177127089143808,1474696885321834496,1812477326828269568,1893665921928286208,2210088671756947456,2437012291923775488,2483979068402987008-s64max |
| PARAM_VALUE | 1 | dentry->d_op->d_automount | 0,2908707185815040000,3401111987815645184,6746145930460459008,7190988915944083456,7386785427940065280,8018779550845526016 |
| PARAM_VALUE | 1 | dentry->d_op->d_compare | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_delete | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_dname | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_hash | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_init | 0,2385819921126617088,7057831443282669568,7824184004865302528 |
| PARAM_VALUE | 1 | dentry->d_op->d_iput | 0,170374395438985216,837750826476904448,5086081384299388928,8216155483032948736 |
| PARAM_VALUE | 1 | dentry->d_op->d_manage | 0,1859587847549206528 |
| PARAM_VALUE | 1 | dentry->d_op->d_prune | 0,2225594340392566784,7225953709177749504 |
| PARAM_VALUE | 1 | dentry->d_op->d_real | 0,4509355519306412032 |
| PARAM_VALUE | 1 | dentry->d_op->d_release | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_revalidate | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_unalias_trylock | 0,6635409759016140800 |
| PARAM_VALUE | 1 | dentry->d_op->d_unalias_unlock | 0,6336447517789900800 |
| PARAM_VALUE | 1 | dentry->d_op->d_weak_revalidate | 0,1549882712720502784,5632434648052031488,5669063523602272256,7231033168839651328 |
| PARAM_VALUE | 1 | dentry->d_parent | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_init | 0,2385819921126617088,7057831443282669568,7824184004865302528 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_iput | 0,170374395438985216,837750826476904448,5086081384299388928,8216155483032948736 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_manage | 0,1859587847549206528 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_prune | 0,2225594340392566784,7225953709177749504 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_real | 0,4509355519306412032 |
| PARAM_VALUE | 1 | dentry->d_sb | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_automount | 0,2908707185815040000,3401111987815645184,6746145930460459008,7190988915944083456,7386785427940065280,8018779550845526016 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_init | 0,2385819921126617088,7057831443282669568,7824184004865302528 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_iput | 0,170374395438985216,837750826476904448,5086081384299388928,8216155483032948736 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_manage | 0,1859587847549206528 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_prune | 0,2225594340392566784,7225953709177749504 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_real | 0,4509355519306412032 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_unalias_trylock | 0,6635409759016140800 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_unalias_unlock | 0,6336447517789900800 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_weak_revalidate | 0,1549882712720502784,5632434648052031488,5669063523602272256,7231033168839651328 |
| PARAM_VALUE | 1 | dentry->d_sb->s_op | 4096-ptr_max |
| PARAM_VALUE | 2 | type | 4 |
| BUF_SIZE | 1 | dentry | (-1),1-s32max |
| BUF_SIZE | 1 | dentry | (-1),1-s32max |
| DATA_SOURCE | 0 | parent | $0 |
| DATA_SOURCE | 1 | dentry | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 1 | dentry->d_inode->i_size |
fs/debugfs/inode.c fsnotify_mkdir() -> audit_inode_child()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | parent | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_alias.pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_flags | 0,134217728-u32max |
| PARAM_VALUE | 1 | dentry->d_hash.next | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_hash.pprev | 1-u64max |
| PARAM_VALUE | 1 | dentry->d_inode | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_inode->i_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 1 | dentry->d_inode->i_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 1 | dentry->d_inode->i_sb->s_cop->inode_info_offs | 1632,1720,2632,2648 |
| PARAM_VALUE | 1 | dentry->d_inode->i_sb->s_export_op->encode_fh | 0,1398972869330624512,1616549510479982592,2037984473558433792,2776440803454029824,3228746867770966016,3502492669594062848,3526768263295340544,3559173554394271744,5000850239487131648,5583386343686406144,5817357685191483392-s64max |
| PARAM_VALUE | 1 | dentry->d_inode->i_sb->s_export_op->fh_to_dentry | 0,447817974243774464,687732489194512384,742201802719268864,868497899885588480,1471448175530500096,2021658383390310400,2445877819203563520,2512819722689847296,2649270699546726400,2761259683714371584,2893332316235677696-s64max |
| PARAM_VALUE | 1 | dentry->d_inode->i_sb->s_export_op->fh_to_parent | 0,148606482432692224,436469935444291584,467281172929331200,529780027764285440,1092893949038768128,1556959531105513472,1608953577475584000,1649536479961075712,2404761408063094784,2970908329832960000,3511613614414655488-s64max |
| PARAM_VALUE | 1 | dentry->d_inode->i_sb->s_export_op->get_parent | 0,264940071972966400,291591359766798336,565128213429456896,893189740598853632,1241177127089143808,1474696885321834496,1812477326828269568,1893665921928286208,2210088671756947456,2437012291923775488,2483979068402987008-s64max |
| PARAM_VALUE | 1 | dentry->d_op->d_automount | 0,2908707185815040000,3401111987815645184,6746145930460459008,7190988915944083456,7386785427940065280,8018779550845526016 |
| PARAM_VALUE | 1 | dentry->d_op->d_compare | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_delete | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_dname | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_hash | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_init | 0,2385819921126617088,7057831443282669568,7824184004865302528 |
| PARAM_VALUE | 1 | dentry->d_op->d_iput | 0,170374395438985216,837750826476904448,5086081384299388928,8216155483032948736 |
| PARAM_VALUE | 1 | dentry->d_op->d_manage | 0,1859587847549206528 |
| PARAM_VALUE | 1 | dentry->d_op->d_prune | 0,2225594340392566784,7225953709177749504 |
| PARAM_VALUE | 1 | dentry->d_op->d_real | 0,4509355519306412032 |
| PARAM_VALUE | 1 | dentry->d_op->d_release | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_revalidate | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_op->d_unalias_trylock | 0,6635409759016140800 |
| PARAM_VALUE | 1 | dentry->d_op->d_unalias_unlock | 0,6336447517789900800 |
| PARAM_VALUE | 1 | dentry->d_op->d_weak_revalidate | 0,1549882712720502784,5632434648052031488,5669063523602272256,7231033168839651328 |
| PARAM_VALUE | 1 | dentry->d_parent | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_init | 0,2385819921126617088,7057831443282669568,7824184004865302528 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_iput | 0,170374395438985216,837750826476904448,5086081384299388928,8216155483032948736 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_manage | 0,1859587847549206528 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_prune | 0,2225594340392566784,7225953709177749504 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_real | 0,4509355519306412032 |
| PARAM_VALUE | 1 | dentry->d_sb | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_automount | 0,2908707185815040000,3401111987815645184,6746145930460459008,7190988915944083456,7386785427940065280,8018779550845526016 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_init | 0,2385819921126617088,7057831443282669568,7824184004865302528 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_iput | 0,170374395438985216,837750826476904448,5086081384299388928,8216155483032948736 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_manage | 0,1859587847549206528 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_prune | 0,2225594340392566784,7225953709177749504 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_real | 0,4509355519306412032 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_unalias_trylock | 0,6635409759016140800 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_unalias_unlock | 0,6336447517789900800 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_weak_revalidate | 0,1549882712720502784,5632434648052031488,5669063523602272256,7231033168839651328 |
| PARAM_VALUE | 1 | dentry->d_sb->s_op | 4096-ptr_max |
| PARAM_VALUE | 2 | type | 4 |
| BUF_SIZE | 1 | dentry | (-1),1-s32max |
| BUF_SIZE | 1 | dentry | (-1),1-s32max |
| DATA_SOURCE | 0 | parent | $0 |
| DATA_SOURCE | 1 | dentry | $1 |
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 1 | dentry->d_inode->i_size |
fs/debugfs/inode.c fsnotify_move() -> audit_inode_child()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | parent | 4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_sb | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_hash.next | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_hash.next->pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_hash.pprev | 1-u64max |
| PARAM_VALUE | 1 | dentry->d_inode | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_inode->i_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 1 | dentry->d_inode->i_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 1 | dentry->d_inode->i_sb | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent->d_children.first | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode->i_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode->i_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_init | 0,2385819921126617088,7057831443282669568,7824184004865302528 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_iput | 0,170374395438985216,837750826476904448,5086081384299388928,8216155483032948736 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_manage | 0,1859587847549206528 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_prune | 0,2225594340392566784,7225953709177749504 |
| PARAM_VALUE | 1 | dentry->d_parent->d_sb->__s_d_op->d_real | 0,4509355519306412032 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_automount | 0,2908707185815040000,3401111987815645184,6746145930460459008,7190988915944083456,7386785427940065280,8018779550845526016 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_init | 0,2385819921126617088,7057831443282669568,7824184004865302528 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_iput | 0,170374395438985216,837750826476904448,5086081384299388928,8216155483032948736 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_manage | 0,1859587847549206528 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_prune | 0,2225594340392566784,7225953709177749504 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_real | 0,4509355519306412032 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_unalias_trylock | 0,6635409759016140800 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_unalias_unlock | 0,6336447517789900800 |
| PARAM_VALUE | 1 | dentry->d_sb->__s_d_op->d_weak_revalidate | 0,1549882712720502784,5632434648052031488,5669063523602272256,7231033168839651328 |
| PARAM_VALUE | 1 | dentry->d_sb->s_vfs_rename_mutex.dep_map->name | 0-255 |
| PARAM_VALUE | 1 | dentry->d_sb->s_vfs_rename_mutex.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 1 | dentry->d_sb->s_vfs_rename_mutex.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 1 | dentry->d_sb->s_vfs_rename_mutex.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 1 | dentry->d_sib->pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_sib.next->pprev | 1-u64max |
| PARAM_VALUE | 1 | dentry->d_sib.pprev | 4096-ptr_max |
| PARAM_VALUE | 2 | type | 4 |
| CAPPED_DATA | 0 | parent | 1 |
| CAPPED_DATA | 0 | parent->i_sb->s_time_max | 1 |
| CAPPED_DATA | 1 | dentry | 1 |
| DATA_SOURCE | 0 | parent | $1 |
| DATA_SOURCE | 1 | dentry | $5 |
| STR_LEN | 0 | parent | 2,5,9,11 |
| STR_LEN | 1 | dentry | 2,5,9,11 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 1 | dentry | unit_jiffy |
| HALF_LOCKED2 | &rdev->wiphy.mtx | ||
| HALF_LOCKED2 | global &rtnl_mutex | ||
| HALF_LOCKED2 | global &shrinker_mutex |
fs/devpts/inode.c fsnotify_create() -> audit_inode_child()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | dentry | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_alias.pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_flags | 0,134217728-u32max |
| PARAM_VALUE | 1 | dentry->d_fsdata | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_hash.next | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_hash.pprev | 1-u64max |
| PARAM_VALUE | 1 | dentry->d_inode | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_parent->d_inode | 4096-ptr_max |
| PARAM_VALUE | 2 | type | 4 |
| DATA_SOURCE | 0 | parent | $0 |
| DATA_SOURCE | 1 | dentry | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 1 | dentry->d_inode->i_size | |
| LOCK2 | &tty->legacy_mutex | ||
| LOCK2 | _T->lock | ||
| TYPE_LOCK | (struct tty_struct)->legacy_mutex |
fs/btrfs/ioctl.c fsnotify_mkdir() -> audit_inode_child()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | parent | 4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | parent->i_mapping->host->i_sb->s_export_op->encode_fh | 0,2,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_sb | 4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_sb->s_cop->empty_dir | 0,661756434209751040,4392966320616476672,5234023279986843648,8614756098313990144 |
| PARAM_VALUE | 0 | parent->i_sb->s_cop->get_context | 0,17350455714160640,4513809449498124288,5149251875611672576,7067778626864828416 |
| PARAM_VALUE | 0 | parent->i_sb->s_cop->set_context | 0,317457138841939968,3250154607523569664,5979066299606671360,6756104566897242112 |
| PARAM_VALUE | 1 | dentry | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_alias.pprev | 4096-ptr_max |
| PARAM_VALUE | 2 | type | 4 |
| BUF_SIZE | 1 | dentry | (-1)-s32max |
| BUF_SIZE | 1 | dentry | (-1)-s32max |
| CAPPED_DATA | 0 | parent->i_sb->s_time_max | 1 |
| CAPPED_DATA | 0 | parent->i_sb->s_user_ns->gid_map.nr_extents | 1 |
| CAPPED_DATA | 0 | parent->i_sb->s_user_ns->uid_map.nr_extents | 1 |
| DATA_SOURCE | 0 | parent | $0 |
| DATA_SOURCE | 1 | dentry | $1 |
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 1 | dentry->d_inode->i_blkbits | |
| NO_OVERFLOW_SIMPLE | 1 | dentry->d_inode->i_size | |
| LOCK2 | &fs_info->subvol_sem | ||
| TYPE_LOCK | (struct btrfs_fs_info)->subvol_sem |
fs/ocfs2/refcounttree.c fsnotify_create() -> audit_inode_child()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | parent | 4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_fop->check_flags | 0 |
| PARAM_VALUE | 0 | parent->i_fop->compat_ioctl | 0,695240133377245184,3064490898378256384,8277073810606530560 |
| PARAM_VALUE | 0 | parent->i_fop->copy_file_range | 0 |
| PARAM_VALUE | 0 | parent->i_fop->fadvise | 0 |
| PARAM_VALUE | 0 | parent->i_fop->fallocate | 0,1357960504741019648,5451898604316704768,7294833795076796416 |
| PARAM_VALUE | 0 | parent->i_fop->fasync | 0,5498812003250176 |
| PARAM_VALUE | 0 | parent->i_fop->flock | 0,5107323284942163968 |
| PARAM_VALUE | 0 | parent->i_fop->flush | 0 |
| PARAM_VALUE | 0 | parent->i_fop->fop_flags | 0-1,3,64 |
| PARAM_VALUE | 0 | parent->i_fop->fsync | 0,1222922547194068992,3027818812235636736,8217954597197033472 |
| PARAM_VALUE | 0 | parent->i_fop->get_unmapped_area | 0,124971230114684928 |
| PARAM_VALUE | 0 | parent->i_fop->iopoll | 0,4655420991112224768 |
| PARAM_VALUE | 0 | parent->i_fop->iterate_shared | 0,6386994525150380032,8243451648225181696 |
| PARAM_VALUE | 0 | parent->i_fop->llseek | 0,492277767372734464,822347878553698304,5746216189559357440,6546627043791368192,8118194047052775424,8973132240956821504 |
| PARAM_VALUE | 0 | parent->i_fop->lock | 0,957067876168839168 |
| PARAM_VALUE | 0 | parent->i_fop->mmap | 0 |
| PARAM_VALUE | 0 | parent->i_fop->mmap_prepare | 0,6570010784732049408,6885435863193137152,8278006848728551424 |
| PARAM_VALUE | 0 | parent->i_fop->open | 4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_fop->poll | 0,3382901614843973632 |
| PARAM_VALUE | 0 | parent->i_fop->read | 0,1706536041323986944 |
| PARAM_VALUE | 0 | parent->i_fop->read_iter | 0,1361316500034015232,2240186942504972288,4899218341707628544,8127867626404999168 |
| PARAM_VALUE | 0 | parent->i_fop->release | 0,2353999083462864896,3782443451574296576,5408471863795695616,6016719737812197376,8602616464973426688 |
| PARAM_VALUE | 0 | parent->i_fop->remap_file_range | 0,1796676283846889472,8958472544276660224 |
| PARAM_VALUE | 0 | parent->i_fop->setlease | 0,8029451603284156416 |
| PARAM_VALUE | 0 | parent->i_fop->show_fdinfo | 0 |
| PARAM_VALUE | 0 | parent->i_fop->splice_eof | 0 |
| PARAM_VALUE | 0 | parent->i_fop->splice_read | 0,1218082698985836544,7349024233072300032,8186755288665538560 |
| PARAM_VALUE | 0 | parent->i_fop->splice_write | 0,3145220535271485440 |
| PARAM_VALUE | 0 | parent->i_fop->unlocked_ioctl | 0,865619370521538560,1267359996887056384,5007980196533522432,6849614532843819008 |
| PARAM_VALUE | 0 | parent->i_fop->uring_cmd | 0,1098803881749745664,5186034168622989312 |
| PARAM_VALUE | 0 | parent->i_fop->uring_cmd_iopoll | 0 |
| PARAM_VALUE | 0 | parent->i_fop->write | 0 |
| PARAM_VALUE | 0 | parent->i_fop->write_iter | 0,2598072610032832512,5042835639063556096,7989474787723927552,8526717696347947008 |
| PARAM_VALUE | 0 | parent->i_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | parent->i_mapping->host->i_sb->s_export_op->encode_fh | 0,2,1398972869330624512,1616549510479982592,2037984473558433792 |
| PARAM_VALUE | 0 | parent->i_mode | 32768 |
| PARAM_VALUE | 0 | parent->i_op->atomic_open | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->create | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->fiemap | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->fileattr_get | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->fileattr_set | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->get_acl | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->get_inode_acl | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->get_link | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->get_offset_ctx | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->getattr | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->link | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->listxattr | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->lookup | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->mkdir | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->mknod | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->permission | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->readlink | 0,1728600404483375104,2832489546165891072,2874824064778891264,3069732422725099520,4516337085607264256 |
| PARAM_VALUE | 0 | parent->i_op->rename | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->rmdir | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->set_acl | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->setattr | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->symlink | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->sync_lazytime | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->tmpfile | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->unlink | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_op->update_time | 0,4096-ptr_max |
| PARAM_VALUE | 0 | parent->i_opflags | 0-65527 |
| PARAM_VALUE | 0 | parent->i_sb->s_cop->empty_dir | 0,86,661756434209751040,4392966320616476672,5234023279986843648 |
| PARAM_VALUE | 0 | parent->i_sb->s_cop->get_context | 0,706,17350455714160640,4513809449498124288,5149251875611672576 |
| PARAM_VALUE | 0 | parent->i_sb->s_cop->inode_info_offs | 1632,1808,2632,2648 |
| PARAM_VALUE | 0 | parent->i_sb->s_cop->set_context | 0,67,317457138841939968,3250154607523569664,5979066299606671360 |
| PARAM_VALUE | 0 | parent->i_sb->s_export_op->encode_fh | 0,2,1398972869330624512,1616549510479982592,2037984473558433792 |
| PARAM_VALUE | 0 | parent->i_sb->s_export_op->fh_to_dentry | 0,8684,447817974243774464,687732489194512384,742201802719268864 |
| PARAM_VALUE | 0 | parent->i_sb->s_export_op->fh_to_parent | 0,4672,148606482432692224,436469935444291584,457356038048772096 |
| PARAM_VALUE | 0 | parent->i_sb->s_export_op->get_parent | 0,8931,264940071972966400,291591359766798336,565128213429456896 |
| PARAM_VALUE | 1 | dentry | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_alias->pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_alias.pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_fsdata | 0,4096-ptr_max |
| PARAM_VALUE | 1 | dentry->d_fsdata->dl_lockres.l_action | 0-2 |
| PARAM_VALUE | 1 | dentry->d_fsdata->dl_lockres.l_lksb->lksb_fsdlm.sb_lvbptr | 0-255 |
| PARAM_VALUE | 1 | dentry->d_fsdata->dl_lockres.l_lksb.lksb_fsdlm.sb_status | s32min-s32max |
| PARAM_VALUE | 1 | dentry->d_fsdata->dl_lockres.l_lksb.lksb_o2dlm.flags | 0-4294967295 |
| PARAM_VALUE | 1 | dentry->d_fsdata->dl_lockres.l_lksb.lksb_o2dlm.lockid->ast | 0-s64max |
| PARAM_VALUE | 1 | dentry->d_fsdata->dl_lockres.l_lksb.lksb_o2dlm.lockid->ast_pending | 0-1 |
| PARAM_VALUE | 1 | dentry->d_fsdata->dl_lockres.l_lksb.lksb_o2dlm.lockid->bast | 0-s64max |
| PARAM_VALUE | 1 | dentry->d_fsdata->dl_lockres.l_lksb.lksb_o2dlm.lockid->bast_pending | 0-1 |
| PARAM_VALUE | 1 | dentry->d_fsdata->dl_lockres.l_lksb.lksb_o2dlm.lockid->cancel_pending | 0-1 |
| PARAM_VALUE | 1 | dentry->d_fsdata->dl_lockres.l_lksb.lksb_o2dlm.lockid->convert_pending | 0-1 |
| PARAM_VALUE | 1 | dentry->d_fsdata->dl_lockres.l_lksb.lksb_o2dlm.lockid->lock_pending | 0-1 |
| PARAM_VALUE | 1 | dentry->d_fsdata->dl_lockres.l_lksb.lksb_o2dlm.lockid->unlock_pending | 0-1 |
| PARAM_VALUE | 1 | dentry->d_fsdata->dl_lockres.l_lksb.lksb_o2dlm.status | 0-4294967295 |
| PARAM_VALUE | 1 | dentry->d_fsdata->dl_lockres.l_lockdep_map->name | 0-255 |
| PARAM_VALUE | 1 | dentry->d_fsdata->dl_lockres.l_pending_gen | 0-4294967295 |
| PARAM_VALUE | 1 | dentry->d_fsdata->dl_lockres.l_requested | 3,5 |
| PARAM_VALUE | 1 | dentry->d_inode | 0,4096-ptr_max |
| PARAM_VALUE | 2 | type | 4 |
| BUF_SIZE | 1 | dentry | (-1),1-s32max |
| BUF_SIZE | 1 | dentry | (-1),1-s32max |
| CAPPED_DATA | 0 | parent->i_sb | 1 |
| DATA_SOURCE | 0 | parent | $0 |
| DATA_SOURCE | 1 | dentry | $1 |
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 1 | dentry->d_inode->i_blkbits | |
| NO_OVERFLOW_SIMPLE | 1 | dentry->d_inode->i_size |