| PARAM_VALUE |
0 |
audit_mark |
4096-ptr_max |
| BUF_SIZE |
0 |
audit_mark |
168 |
| BUF_SIZE |
0 |
audit_mark->path |
(-1),2-4097 |
| BUF_SIZE |
0 |
audit_mark->rule |
(-1),376 |
| BUF_SIZE |
1 |
inode |
(-1)-0,4,8-s32max |
| BUF_SIZE |
1 |
inode |
(-1)-0,4,8-s32max |
| DATA_SOURCE |
0 |
audit_mark |
r _kzalloc_noprof |
| STR_LEN |
0 |
audit_mark->rule |
(-1)-1010101 |
| MEM_ZERO |
0 |
&audit_mark->mark |
|
| RX_PATH |
|
|
|
| TASK_NOT_RUNNING |
|
|
|
| NOCHECK_CALL |
|
|
|
| USER_DATA |
0 |
audit_mark->rule->action |
0[u] |
| USER_DATA |
0 |
audit_mark->rule->field_count |
0-64[u] |
| USER_DATA |
0 |
audit_mark->rule->flags |
0,16[c] |
| USER_DATA |
0 |
audit_mark->rule->listnr |
0-1,4-7[c] |
| USER_DATA |
0 |
*audit_mark->path |
0-255 |
| NO_OVERFLOW_SIMPLE |
0 |
audit_mark->rule->field_count |
|
| USER_PTR |
0 |
audit_mark->path |
|
| HALF_LOCKED2 |
|
global &audit_cmd_mutex.lock |
|
| HALF_LOCKED2 |
|
global &audit_filter_mutex |
|