Name
__audit_inode_update —
update inode info for last collected name
Synopsis
void __audit_inode_update ( | const struct inode * | inode) ; |
Arguments
inode
inode being audited
Description
When open
is called on an existing object with the O_CREAT flag, the inode
data audit initially collects is incorrect. This additional hook ensures
audit has the inode data for the actual object to be opened.