Lines Matching refs:rule
291 oentry = container_of(r, struct audit_entry, rule); in audit_update_watch()
292 list_del(&oentry->rule.rlist); in audit_update_watch()
295 nentry = audit_dupe_rule(&oentry->rule); in audit_update_watch()
297 list_del(&oentry->rule.list); in audit_update_watch()
307 audit_put_watch(nentry->rule.watch); in audit_update_watch()
309 nentry->rule.watch = nwatch; in audit_update_watch()
310 list_add(&nentry->rule.rlist, &nwatch->rules); in audit_update_watch()
312 list_replace(&oentry->rule.list, in audit_update_watch()
313 &nentry->rule.list); in audit_update_watch()
315 if (oentry->rule.exe) in audit_update_watch()
316 audit_remove_mark(oentry->rule.exe); in audit_update_watch()
345 e = container_of(r, struct audit_entry, rule); in audit_remove_parent_watches()
347 if (e->rule.exe) in audit_remove_parent_watches()
348 audit_remove_mark(e->rule.exe); in audit_remove_parent_watches()