path: root/kernel/audit.h
diff options
authorEric Paris <>2009-12-17 20:12:05 -0500
committerEric Paris <>2010-07-28 09:58:17 -0400
commita05fb6cc573130915380e00d182a4c6571cec6b2 (patch)
treec67e626c5307d89e6d7e65d0b2f9834c3591edb2 /kernel/audit.h
parente118e9c5638bbe877aa26b5cd2fd223cc24cdc8a (diff)
audit: do not get and put just to free a watch
deleting audit watch rules is not currently done under audit_filter_mutex. It was done this way because we could not hold the mutex during inotify manipulation. Since we are using fsnotify we don't need to do the extra get/put pair nor do we need the private list on which to store the parents while they are about to be freed. Signed-off-by: Eric Paris <>
Diffstat (limited to 'kernel/audit.h')
1 files changed, 1 insertions, 2 deletions
diff --git a/kernel/audit.h b/kernel/audit.h
index 82c8a09099f4..100b454a7354 100644
--- a/kernel/audit.h
+++ b/kernel/audit.h
@@ -108,8 +108,7 @@ extern void audit_put_watch(struct audit_watch *watch);
extern void audit_get_watch(struct audit_watch *watch);
extern int audit_to_watch(struct audit_krule *krule, char *path, int len, u32 op);
extern int audit_add_watch(struct audit_krule *krule, struct list_head **list);
-extern void audit_remove_watch_rule(struct audit_krule *krule, struct list_head *list);
-extern void audit_watch_inotify_unregister(struct list_head *in_list);
+extern void audit_remove_watch_rule(struct audit_krule *krule);
extern char *audit_watch_path(struct audit_watch *watch);
extern int audit_watch_compare(struct audit_watch *watch, unsigned long ino, dev_t dev);
extern struct audit_entry *audit_dupe_rule(struct audit_krule *old);