Lines Matching full:rules
43 struct list_head rules; /* anchor for krule->rlist */ member
109 WARN_ON(!list_empty(&watch->rules)); in audit_put_watch()
168 INIT_LIST_HEAD(&watch->rules); in audit_init_watch()
200 /* Duplicate the given audit watch. The new watch's rules list is initialized
243 /* Update inode info in audit rules based on filesystem event. */
260 /* If the update involves invalidating rules, do the inode-based in audit_update_watch()
276 list_for_each_entry_safe(r, nextr, &owatch->rules, rlist) { in audit_update_watch()
297 list_add(&nentry->rule.rlist, &nwatch->rules); in audit_update_watch()
320 /* Remove all watches & rules associated with a parent that is going away. */
329 list_for_each_entry_safe(r, nextr, &w->rules, rlist) { in audit_remove_parent_watches()
394 list_add(&krule->rlist, &watch->rules); in audit_add_to_parent()
453 if (list_empty(&watch->rules)) { in audit_remove_watch_rule()
466 /* Update watch data in audit rules based on fsnotify events. */