audit_alloc_mark  265 kernel/audit.h extern struct audit_fsnotify_mark *audit_alloc_mark(struct audit_krule *krule,
audit_alloc_mark  531 kernel/audit_watch.c 	audit_mark = audit_alloc_mark(new, pathname, strlen(pathname));
audit_alloc_mark  584 kernel/auditfilter.c 			audit_mark = audit_alloc_mark(&entry->rule, str, f_val);