kernel/audit_fsnotify.c
Source file repositories/reference/linux-study-clean/kernel/audit_fsnotify.c
File Facts
- System
- Linux kernel
- Corpus path
kernel/audit_fsnotify.c- Extension
.c- Size
- 5525 bytes
- Lines
- 205
- Domain
- Core OS
- Bucket
- Scheduler, Processes, Timers, Sync, And Syscalls
- Inferred role
- Core OS: exported/initcall integration point
- Status
- integration implementation candidate
Why This File Exists
Core operating-system implementation surface: boot, tasks, memory, VFS, syscall-facing interfaces, synchronization, credentials, and isolation.
- Core operating-system implementation surface: boot, tasks, memory, VFS, syscall-facing interfaces, synchronization, credentials, and isolation.
- Exports symbols or registers init work; inspect boot/module ordering and who consumes the exported contract.
- Allocates kernel memory; connect allocation flags and lifetime to context constraints.
- Defines or uses C structs; map object ownership, embedded links, reference counts, and lock ownership.
Dependency Surface
linux/kernel.hlinux/audit.hlinux/kthread.hlinux/mutex.hlinux/fs.hlinux/fsnotify_backend.hlinux/namei.hlinux/netlink.hlinux/sched.hlinux/slab.hlinux/security.haudit.h
Detected Declarations
struct audit_fsnotify_markfunction audit_fsnotify_mark_freefunction audit_fsnotify_free_markfunction audit_mark_comparefunction audit_update_markfunction audit_mark_log_rule_changefunction audit_remove_markfunction audit_remove_mark_rulefunction audit_autoremove_mark_rulefunction audit_mark_handle_eventfunction audit_fsnotify_initmodule init audit_fsnotify_init
Annotated Snippet
device_initcall(audit_fsnotify_init);Annotation
- Immediate include surface: `linux/kernel.h`, `linux/audit.h`, `linux/kthread.h`, `linux/mutex.h`, `linux/fs.h`, `linux/fsnotify_backend.h`, `linux/namei.h`, `linux/netlink.h`.
- Detected declarations: `struct audit_fsnotify_mark`, `function audit_fsnotify_mark_free`, `function audit_fsnotify_free_mark`, `function audit_mark_compare`, `function audit_update_mark`, `function audit_mark_log_rule_change`, `function audit_remove_mark`, `function audit_remove_mark_rule`, `function audit_autoremove_mark_rule`, `function audit_mark_handle_event`.
- Atlas domain: Core OS / Scheduler, Processes, Timers, Sync, And Syscalls.
- Implementation status: integration implementation candidate.
Implementation Notes
- This generated page is the file-by-file coverage layer; curated subsystem chapters should link here when they synthesize a multi-file control flow.
- Core OS pages should be promoted from atlas-only to deep-reviewed when they explain data structures, invariants, locking, lifecycle, and C implementation snippets.
- Driver-family pages are intentionally pattern-oriented unless they are part of the selected PCIe/NVMe representative device path.