Lines Matching refs:k_ar
272 ar->k_ar.ar_magic = AUDIT_RECORD_MAGIC; in audit_record_ctor()
273 nanotime(&ar->k_ar.ar_starttime); in audit_record_ctor()
279 cru2x(cred, &ar->k_ar.ar_subj_cred); in audit_record_ctor()
280 ar->k_ar.ar_subj_ruid = cred->cr_ruid; in audit_record_ctor()
281 ar->k_ar.ar_subj_rgid = cred->cr_rgid; in audit_record_ctor()
282 ar->k_ar.ar_subj_egid = cred->cr_gid; in audit_record_ctor()
283 ar->k_ar.ar_subj_auid = cred->cr_audit.ai_auid; in audit_record_ctor()
284 ar->k_ar.ar_subj_asid = cred->cr_audit.ai_asid; in audit_record_ctor()
285 ar->k_ar.ar_subj_pid = td->td_proc->p_pid; in audit_record_ctor()
286 ar->k_ar.ar_subj_amask = cred->cr_audit.ai_mask; in audit_record_ctor()
287 ar->k_ar.ar_subj_term_addr = cred->cr_audit.ai_termid; in audit_record_ctor()
295 (void) strlcpy(ar->k_ar.ar_jailname, pr->pr_name, in audit_record_ctor()
296 sizeof(ar->k_ar.ar_jailname)); in audit_record_ctor()
298 ar->k_ar.ar_jailname[0] = '\0'; in audit_record_ctor()
310 if (ar->k_ar.ar_arg_upath1 != NULL) in audit_record_dtor()
311 free(ar->k_ar.ar_arg_upath1, M_AUDITPATH); in audit_record_dtor()
312 if (ar->k_ar.ar_arg_upath2 != NULL) in audit_record_dtor()
313 free(ar->k_ar.ar_arg_upath2, M_AUDITPATH); in audit_record_dtor()
314 if (ar->k_ar.ar_arg_text != NULL) in audit_record_dtor()
315 free(ar->k_ar.ar_arg_text, M_AUDITTEXT); in audit_record_dtor()
318 if (ar->k_ar.ar_arg_argv != NULL) in audit_record_dtor()
319 free(ar->k_ar.ar_arg_argv, M_AUDITTEXT); in audit_record_dtor()
320 if (ar->k_ar.ar_arg_envv != NULL) in audit_record_dtor()
321 free(ar->k_ar.ar_arg_envv, M_AUDITTEXT); in audit_record_dtor()
322 if (ar->k_ar.ar_arg_groups.gidset != NULL) in audit_record_dtor()
323 free(ar->k_ar.ar_arg_groups.gidset, M_AUDITGIDSET); in audit_record_dtor()
436 ar->k_ar.ar_event = event; in audit_new()
459 ar->k_ar.ar_errno = error; in audit_commit()
460 ar->k_ar.ar_retval = retval; in audit_commit()
461 nanotime(&ar->k_ar.ar_endtime); in audit_commit()
467 if (ar->k_ar.ar_subj_auid == AU_DEFAUDITID) in audit_commit()
470 aumask = &ar->k_ar.ar_subj_amask; in audit_commit()
482 switch(ar->k_ar.ar_event) { in audit_commit()
484 ar->k_ar.ar_event = audit_flags_and_error_to_openevent( in audit_commit()
485 ar->k_ar.ar_arg_fflags, error); in audit_commit()
489 ar->k_ar.ar_event = audit_flags_and_error_to_openatevent( in audit_commit()
490 ar->k_ar.ar_arg_fflags, error); in audit_commit()
494 ar->k_ar.ar_event = audit_ctlname_to_sysctlevent( in audit_commit()
495 ar->k_ar.ar_arg_ctlname, ar->k_ar.ar_valid_arg); in audit_commit()
500 ar->k_ar.ar_event = auditon_command_event(ar->k_ar.ar_arg_cmd); in audit_commit()
505 ar->k_ar.ar_event = in audit_commit()
506 audit_msgsys_to_event(ar->k_ar.ar_arg_svipc_which); in audit_commit()
511 ar->k_ar.ar_event = in audit_commit()
512 audit_semsys_to_event(ar->k_ar.ar_arg_svipc_which); in audit_commit()
517 ar->k_ar.ar_event = in audit_commit()
518 audit_shmsys_to_event(ar->k_ar.ar_arg_svipc_which); in audit_commit()
522 auid = ar->k_ar.ar_subj_auid; in audit_commit()
523 event = ar->k_ar.ar_event; in audit_commit()
827 pathp = &ar->k_ar.ar_arg_upath1; in audit_proc_coredump()
832 ar->k_ar.ar_arg_signum = td->td_proc->p_sig; in audit_proc_coredump()