89 	if (erule->watch)  in audit_free_rule()
90 		audit_put_watch(erule->watch);  in audit_free_rule()
158 	    krule->inode_f || krule->watch || krule->tree ||  in audit_to_inode()
672 						  audit_watch_path(krule->watch));  in audit_krule_to_data()
737 			if (strcmp(audit_watch_path(a->watch),  in audit_compare_rule()
738 				   audit_watch_path(b->watch)))  in audit_compare_rule()
816  * of the watch - that pointer is carried over.  The LSM specific fields
891 	if (old->watch) {  in audit_dupe_rule()
892 		audit_get_watch(old->watch);  in audit_dupe_rule()
893 		new->watch = old->watch;  in audit_dupe_rule()
911 	} else if (entry->rule.watch) {  in audit_find_rule()
943 	struct audit_watch *watch = entry->rule.watch;  in audit_add_rule()  local
970 	if (watch) {  in audit_add_rule()
1049 	if (e->rule.watch)  in audit_del_rule()
1427 		if (r->watch)  in update_lsm_rule()
1432 		if (r->watch || r->tree)  in update_lsm_rule()