audit_filter
err = audit_filter(msg_type, AUDIT_FILTER_USER);
if (unlikely(!audit_filter(type, AUDIT_FILTER_EXCLUDE)))
extern int audit_filter(int msgtype, unsigned int listtype);
const struct audit_filter *const filter,
static int audit_init_filter_exe(struct audit_filter *filter, const char *path)
static int audit_cleanup(int audit_fd, struct audit_filter *filter)
struct audit_filter new_filter;
static int audit_init_with_exe_filter(struct audit_filter *filter)
audit_filter_exe(self->audit_fd, &self->audit_filter,
EXPECT_EQ(0, audit_filter_exe(self->audit_fd, &self->audit_filter,
struct audit_filter audit_filter;
self->audit_fd = audit_init_with_exe_filter(&self->audit_filter);
EXPECT_EQ(0, audit_cleanup(self->audit_fd, &self->audit_filter));
audit_filter_exe(self->audit_fd, &self->audit_filter,
struct audit_filter audit_filter;
struct audit_filter audit_filter;
self->audit_fd = audit_init_with_exe_filter(&self->audit_filter);
EXPECT_EQ(0, audit_init_filter_exe(&self->audit_filter,
EXPECT_EQ(0, audit_filter_exe(self->audit_fd, &self->audit_filter,
EXPECT_EQ(0, audit_filter_exe(self->audit_fd, &self->audit_filter,
EXPECT_EQ(0, audit_cleanup(self->audit_fd, &self->audit_filter));
struct audit_filter audit_filter;
self->audit_fd = audit_init_with_exe_filter(&self->audit_filter);
struct audit_filter audit_filter;
self->audit_fd = audit_init_with_exe_filter(&self->audit_filter);
EXPECT_EQ(0, audit_cleanup(self->audit_fd, &self->audit_filter));
struct audit_filter audit_filter;
self->audit_fd = audit_init_with_exe_filter(&self->audit_filter);
struct audit_filter audit_filter;
self->audit_fd = audit_init_with_exe_filter(&self->audit_filter);