__audit_inode_update9
Update inode info for last collected name
Usage
void __audit_inode_update(const struct inode * inode);
Arguments
inode
inode being audited
Overview
When open is called on an existing object with the O_CREAT flag, the inode data audit initially collects is incorrect. This additional hook ensures audit has the inode data for the actual object to be opened.