Searched refs:k_ar (Results 1 – 6 of 6) sorted by relevance
81 ar->k_ar.ar_arg_addr = addr; in audit_arg_addr()108 ar->k_ar.ar_arg_len = len; in audit_arg_len()147 ar->k_ar.ar_arg_fd = fd; in audit_arg_fd()173 ar->k_ar.ar_arg_gid = gid; in audit_arg_gid()186 ar->k_ar.ar_arg_uid = uid; in audit_arg_uid()199 ar->k_ar.ar_arg_egid = egid; in audit_arg_egid()353 ar->k_ar.ar_arg_dev = dev; in audit_arg_dev()379 ar->k_ar.ar_arg_uid = uid; in audit_arg_owner()380 ar->k_ar.ar_arg_gid = gid; in audit_arg_owner()393 ar->k_ar.ar_arg_pid = pid; in audit_arg_pid()[all …]
431 ar->k_ar.ar_event = event; in audit_new()459 ar->k_ar.ar_errno = error; in audit_commit()460 ar->k_ar.ar_retval = retval; in audit_commit()482 switch(ar->k_ar.ar_event) { in audit_commit()495 ar->k_ar.ar_arg_ctlname, ar->k_ar.ar_valid_arg); in audit_commit()500 ar->k_ar.ar_event = auditon_command_event(ar->k_ar.ar_arg_cmd); in audit_commit()505 ar->k_ar.ar_event = in audit_commit()511 ar->k_ar.ar_event = in audit_commit()517 ar->k_ar.ar_event = in audit_commit()522 auid = ar->k_ar.ar_subj_auid; in audit_commit()[all …]
313 #define ARG_IS_VALID(kar, arg) ((kar)->k_ar.ar_valid_arg & (arg))315 (kar)->k_ar.ar_valid_arg |= (arg); \318 (kar)->k_ar.ar_valid_arg &= ~(arg); \327 struct audit_record k_ar; member
377 auid = ar->k_ar.ar_subj_auid; in audit_worker_process_record()378 event = ar->k_ar.ar_event; in audit_worker_process_record()380 if (ar->k_ar.ar_errno == 0) in audit_worker_process_record()
246 (uintptr_t)ene_name_lower, (uintptr_t)&kar->k_ar, 0, 0, 0); in dtaudit_commit()288 (uintptr_t)&kar->k_ar, (uintptr_t)bsm_data, (uintptr_t)bsm_len, in dtaudit_bsm()
479 ar = &kar->k_ar; in kaudit_to_bsm()