Name
audit_log_end —
end one audit record
Synopsis
void audit_log_end ( | struct audit_buffer * ab); |
Arguments
struct audit_buffer * ab
the audit_buffer
Description
We can not do a netlink send inside an irq context because it blocks (last
arg, flags, is not set to MSG_DONTWAIT), so the audit buffer is placed on a
queue and a tasklet is scheduled to remove them from the queue outside the
irq context. May be called in any context.