audit_field
struct audit_field *fields;
struct audit_field *arch_f; /* quick access to arch field */
struct audit_field *inode_f; /* quick access to an inode field */
struct audit_field *fields;
struct audit_field *f = &e->rule.fields[i];
struct audit_field *f)
struct audit_field *arch = entry->rule.arch_f;
static int audit_field_valid(struct audit_entry *entry, struct audit_field *f)
struct audit_field *f = &entry->rule.fields[i];
static void audit_free_lsm_field(struct audit_field *f)
struct audit_field *f = &krule->fields[i];
static inline int audit_dupe_lsm_field(struct audit_field *df,
struct audit_field *sf)
memcpy(new->fields, old->fields, sizeof(struct audit_field) * fcount);
struct audit_field *f = &e->rule.fields[i];
struct audit_field *f = &e->rule.fields[i];
struct audit_field *f,
struct audit_field *f,
struct audit_field *f,
struct audit_field *f = &rule->fields[i];
struct audit_field *f = &rule->fields[i];
struct audit_field *f = &rule->fields[i];
struct audit_field *f;