Lines Matching refs:ar
64 static void audit_sys_auditon(struct audit_record *ar,
194 tok = au_to_arg32(argnum, "at fd 1", ar->ar_arg_atfd1); \
201 tok = au_to_arg32(argnum, "at fd 2", ar->ar_arg_atfd2); \
208 tok = au_to_path(ar->ar_arg_upath1); \
215 tok = au_to_path(ar->ar_arg_upath2); \
222 tok = au_to_arg32(1, "at fd", ar->ar_arg_atfd); \
226 tok = au_to_attr32(&ar->ar_arg_vnode1); \
234 tok = au_to_attr32(&ar->ar_arg_vnode1); \
241 tok = au_to_attr32(&ar->ar_arg_vnode2); \
249 tok = au_to_arg32(1, "fd", ar->ar_arg_fd); \
252 tok = au_to_attr32(&ar->ar_arg_vnode1); \
257 ar->ar_arg_fd); \
264 if ((ar->ar_arg_pid > 0) /* Reference a single process */ \
266 tok = au_to_process32_ex(ar->ar_arg_auid, \
267 ar->ar_arg_euid, ar->ar_arg_egid, \
268 ar->ar_arg_ruid, ar->ar_arg_rgid, \
269 ar->ar_arg_pid, ar->ar_arg_asid, \
270 &ar->ar_arg_termid_addr); \
273 tok = au_to_arg32(argn, "process", ar->ar_arg_pid); \
280 switch (ar->ar_arg_value) { \
289 "attrnamespace", ar->ar_arg_value); \
296 tok = au_to_text(ar->ar_arg_text); \
310 (uint32_t)(uintptr_t)ar->ar_arg_addr); \
313 (uint64_t)(uintptr_t)ar->ar_arg_addr); \
324 audit_sys_auditon(struct audit_record *ar, struct au_record *rec) in audit_sys_auditon() argument
328 tok = au_to_arg32(3, "length", ar->ar_arg_len); in audit_sys_auditon()
330 switch (ar->ar_arg_cmd) { in audit_sys_auditon()
332 if ((size_t)ar->ar_arg_len == sizeof(int64_t)) { in audit_sys_auditon()
334 ar->ar_arg_auditon.au_policy64); in audit_sys_auditon()
341 tok = au_to_arg32(2, "policy", ar->ar_arg_auditon.au_policy); in audit_sys_auditon()
347 ar->ar_arg_auditon.au_mask.am_success); in audit_sys_auditon()
350 ar->ar_arg_auditon.au_mask.am_failure); in audit_sys_auditon()
355 if ((size_t)ar->ar_arg_len == sizeof(au_qctrl64_t)) { in audit_sys_auditon()
357 ar->ar_arg_auditon.au_qctrl64.aq64_hiwater); in audit_sys_auditon()
360 ar->ar_arg_auditon.au_qctrl64.aq64_lowater); in audit_sys_auditon()
363 ar->ar_arg_auditon.au_qctrl64.aq64_bufsz); in audit_sys_auditon()
366 ar->ar_arg_auditon.au_qctrl64.aq64_delay); in audit_sys_auditon()
369 ar->ar_arg_auditon.au_qctrl64.aq64_minfree); in audit_sys_auditon()
377 ar->ar_arg_auditon.au_qctrl.aq_hiwater); in audit_sys_auditon()
380 ar->ar_arg_auditon.au_qctrl.aq_lowater); in audit_sys_auditon()
383 ar->ar_arg_auditon.au_qctrl.aq_bufsz); in audit_sys_auditon()
386 ar->ar_arg_auditon.au_qctrl.aq_delay); in audit_sys_auditon()
389 ar->ar_arg_auditon.au_qctrl.aq_minfree); in audit_sys_auditon()
395 ar->ar_arg_auditon.au_auinfo.ai_mask.am_success); in audit_sys_auditon()
398 ar->ar_arg_auditon.au_auinfo.ai_mask.am_failure); in audit_sys_auditon()
404 ar->ar_arg_auditon.au_auinfo.ai_mask.am_success); in audit_sys_auditon()
407 ar->ar_arg_auditon.au_auinfo.ai_mask.am_failure); in audit_sys_auditon()
412 if ((size_t)ar->ar_arg_len == sizeof(int64_t)) { in audit_sys_auditon()
414 ar->ar_arg_auditon.au_cond64); in audit_sys_auditon()
421 tok = au_to_arg32(2, "setcond", ar->ar_arg_auditon.au_cond); in audit_sys_auditon()
427 ar->ar_arg_auditon.au_evclass.ec_number); in audit_sys_auditon()
430 ar->ar_arg_auditon.au_evclass.ec_class); in audit_sys_auditon()
436 ar->ar_arg_auditon.au_aupinfo.ap_mask.am_success); in audit_sys_auditon()
439 ar->ar_arg_auditon.au_aupinfo.ap_mask.am_failure); in audit_sys_auditon()
445 ar->ar_arg_auditon.au_fstat.af_filesz); in audit_sys_auditon()
470 struct audit_record *ar; in kaudit_to_bsm() local
476 ar = &kar->k_ar; in kaudit_to_bsm()
483 if (ar->ar_jailname[0] != '\0') in kaudit_to_bsm()
484 jail_tok = au_to_zonename(ar->ar_jailname); in kaudit_to_bsm()
487 switch (ar->ar_subj_term_addr.at_type) { in kaudit_to_bsm()
489 tid.port = ar->ar_subj_term_addr.at_port; in kaudit_to_bsm()
490 tid.machine = ar->ar_subj_term_addr.at_addr[0]; in kaudit_to_bsm()
491 subj_tok = au_to_subject32(ar->ar_subj_auid, /* audit ID */ in kaudit_to_bsm()
492 ar->ar_subj_cred.cr_uid, /* eff uid */ in kaudit_to_bsm()
493 ar->ar_subj_egid, /* eff group id */ in kaudit_to_bsm()
494 ar->ar_subj_ruid, /* real uid */ in kaudit_to_bsm()
495 ar->ar_subj_rgid, /* real group id */ in kaudit_to_bsm()
496 ar->ar_subj_pid, /* process id */ in kaudit_to_bsm()
497 ar->ar_subj_asid, /* session ID */ in kaudit_to_bsm()
501 subj_tok = au_to_subject32_ex(ar->ar_subj_auid, in kaudit_to_bsm()
502 ar->ar_subj_cred.cr_uid, in kaudit_to_bsm()
503 ar->ar_subj_egid, in kaudit_to_bsm()
504 ar->ar_subj_ruid, in kaudit_to_bsm()
505 ar->ar_subj_rgid, in kaudit_to_bsm()
506 ar->ar_subj_pid, in kaudit_to_bsm()
507 ar->ar_subj_asid, in kaudit_to_bsm()
508 &ar->ar_subj_term_addr); in kaudit_to_bsm()
512 subj_tok = au_to_subject32(ar->ar_subj_auid, in kaudit_to_bsm()
513 ar->ar_subj_cred.cr_uid, in kaudit_to_bsm()
514 ar->ar_subj_egid, in kaudit_to_bsm()
515 ar->ar_subj_ruid, in kaudit_to_bsm()
516 ar->ar_subj_rgid, in kaudit_to_bsm()
517 ar->ar_subj_pid, in kaudit_to_bsm()
518 ar->ar_subj_asid, in kaudit_to_bsm()
528 switch(ar->ar_event) { in kaudit_to_bsm()
531 tok = au_to_arg32(1, "fd", ar->ar_arg_fd); in kaudit_to_bsm()
536 &ar->ar_arg_sockaddr); in kaudit_to_bsm()
541 &ar->ar_arg_sockaddr); in kaudit_to_bsm()
560 tok = au_to_arg32(1, "fd", ar->ar_arg_fd); in kaudit_to_bsm()
565 &ar->ar_arg_sockaddr); in kaudit_to_bsm()
570 &ar->ar_arg_sockaddr); in kaudit_to_bsm()
581 tok = au_to_arg32(2, "fd", ar->ar_arg_fd); in kaudit_to_bsm()
586 &ar->ar_arg_sockaddr); in kaudit_to_bsm()
596 &ar->ar_arg_sockaddr); in kaudit_to_bsm()
601 &ar->ar_arg_sockaddr); in kaudit_to_bsm()
612 ar->ar_arg_sockinfo.so_domain); in kaudit_to_bsm()
615 ar->ar_arg_sockinfo.so_type); in kaudit_to_bsm()
618 ar->ar_arg_sockinfo.so_protocol); in kaudit_to_bsm()
626 tok = au_to_arg32(1, "fd", ar->ar_arg_fd); in kaudit_to_bsm()
642 tok = au_to_arg32(2, "setauid", ar->ar_arg_auid); in kaudit_to_bsm()
653 ar->ar_arg_auid); in kaudit_to_bsm()
656 ar->ar_arg_termid.port); in kaudit_to_bsm()
659 ar->ar_arg_termid.machine); in kaudit_to_bsm()
662 ar->ar_arg_amask.am_success); in kaudit_to_bsm()
665 ar->ar_arg_amask.am_failure); in kaudit_to_bsm()
668 ar->ar_arg_asid); in kaudit_to_bsm()
679 ar->ar_arg_auid); in kaudit_to_bsm()
682 ar->ar_arg_amask.am_success); in kaudit_to_bsm()
685 ar->ar_arg_amask.am_failure); in kaudit_to_bsm()
688 ar->ar_arg_asid); in kaudit_to_bsm()
691 ar->ar_arg_termid_addr.at_type); in kaudit_to_bsm()
694 ar->ar_arg_termid_addr.at_port); in kaudit_to_bsm()
696 if (ar->ar_arg_termid_addr.at_type == AU_IPv6) in kaudit_to_bsm()
698 &ar->ar_arg_termid_addr.at_addr[0]); in kaudit_to_bsm()
699 if (ar->ar_arg_termid_addr.at_type == AU_IPv4) in kaudit_to_bsm()
701 &ar->ar_arg_termid_addr.at_addr[0]); in kaudit_to_bsm()
711 tok = au_to_arg32(1, "cmd", ar->ar_arg_cmd); in kaudit_to_bsm()
733 audit_sys_auditon(ar, rec); in kaudit_to_bsm()
742 tok = au_to_exit(ar->ar_arg_exitretval, in kaudit_to_bsm()
743 ar->ar_arg_exitstatus); in kaudit_to_bsm()
795 tok = au_to_arg32(1, "type", ar->ar_arg_value); in kaudit_to_bsm()
854 tok = au_to_arg32(2, "mode", ar->ar_arg_value); in kaudit_to_bsm()
869 tok = au_to_arg32(2, "flags", ar->ar_arg_fflags); in kaudit_to_bsm()
879 ar->ar_arg_mode); in kaudit_to_bsm()
889 ar->ar_arg_mode); in kaudit_to_bsm()
898 tok = au_to_arg32(2, "new file uid", ar->ar_arg_uid); in kaudit_to_bsm()
902 tok = au_to_arg32(3, "new file gid", ar->ar_arg_gid); in kaudit_to_bsm()
911 tok = au_to_arg32(3, "new file uid", ar->ar_arg_uid); in kaudit_to_bsm()
915 tok = au_to_arg32(4, "new file gid", ar->ar_arg_gid); in kaudit_to_bsm()
928 tok = au_to_arg32(1, "fd", ar->ar_arg_fd); in kaudit_to_bsm()
936 tok = au_to_arg32(1, "fd", ar->ar_arg_fd); in kaudit_to_bsm()
943 tok = au_to_arg32(1, "lowfd", ar->ar_arg_fd); in kaudit_to_bsm()
947 tok = au_to_arg32(2, "highfd", ar->ar_arg_cmd); in kaudit_to_bsm()
951 tok = au_to_arg32(3, "flags", ar->ar_arg_fflags); in kaudit_to_bsm()
958 tok = au_to_arg32(1, "signal", ar->ar_arg_signum); in kaudit_to_bsm()
967 tok = au_to_arg32(2, "cmd", ar->ar_arg_cmd); in kaudit_to_bsm()
993 tok = au_to_arg32(2, "fd", ar->ar_arg_fd); in kaudit_to_bsm()
1001 tok = au_to_arg32(1, "fd", ar->ar_arg_fd); in kaudit_to_bsm()
1009 tok = au_to_exec_args(ar->ar_arg_argv, in kaudit_to_bsm()
1010 ar->ar_arg_argc); in kaudit_to_bsm()
1014 tok = au_to_exec_env(ar->ar_arg_envv, in kaudit_to_bsm()
1015 ar->ar_arg_envc); in kaudit_to_bsm()
1024 ar->ar_arg_mode); in kaudit_to_bsm()
1056 tok = au_to_arg32(2, "new file uid", ar->ar_arg_uid); in kaudit_to_bsm()
1060 tok = au_to_arg32(3, "new file gid", ar->ar_arg_gid); in kaudit_to_bsm()
1069 au_fcntl_cmd_to_bsm(ar->ar_arg_cmd)); in kaudit_to_bsm()
1077 tok = au_to_arg32(2, "flags", ar->ar_arg_fflags); in kaudit_to_bsm()
1085 tok = au_to_arg32(2, "operation", ar->ar_arg_cmd); in kaudit_to_bsm()
1093 tok = au_to_arg32(2, "operation", ar->ar_arg_cmd); in kaudit_to_bsm()
1097 tok = au_to_arg32(4, "flags", ar->ar_arg_fflags); in kaudit_to_bsm()
1105 tok = au_to_arg32(1, "flags", ar->ar_arg_fflags); in kaudit_to_bsm()
1113 tok = au_to_arg32(0, "child PID", ar->ar_arg_pid); in kaudit_to_bsm()
1120 tok = au_to_arg32(2, "cmd", ar->ar_arg_cmd); in kaudit_to_bsm()
1127 tok = kau_to_socket(&ar->ar_arg_sockinfo); in kaudit_to_bsm()
1132 ar->ar_arg_fd); in kaudit_to_bsm()
1142 tok = au_to_arg32(2, "signal", ar->ar_arg_signum); in kaudit_to_bsm()
1150 tok = au_to_arg32(2, "ops", ar->ar_arg_cmd); in kaudit_to_bsm()
1154 tok = au_to_arg32(3, "trpoints", ar->ar_arg_value); in kaudit_to_bsm()
1182 tok = au_to_arg32(2, "mode", ar->ar_arg_mode); in kaudit_to_bsm()
1192 tok = au_to_arg32(2, "mode", ar->ar_arg_mode); in kaudit_to_bsm()
1196 tok = au_to_arg32(3, "dev", ar->ar_arg_dev); in kaudit_to_bsm()
1210 tok = au_to_arg32(2, "len", ar->ar_arg_len); in kaudit_to_bsm()
1213 if (ar->ar_event == AUE_MMAP) in kaudit_to_bsm()
1215 if (ar->ar_event == AUE_MPROTECT) { in kaudit_to_bsm()
1218 ar->ar_arg_value); in kaudit_to_bsm()
1222 if (ar->ar_event == AUE_MINHERIT) { in kaudit_to_bsm()
1225 ar->ar_arg_value); in kaudit_to_bsm()
1235 tok = au_to_arg32(3, "flags", ar->ar_arg_fflags); in kaudit_to_bsm()
1239 tok = au_to_text(ar->ar_arg_text); in kaudit_to_bsm()
1246 tok = au_to_arg32(1, "flags", ar->ar_arg_cmd); in kaudit_to_bsm()
1253 tok = au_to_arg32(2, "flags", ar->ar_arg_value); in kaudit_to_bsm()
1258 tok = au_to_text(ar->ar_arg_text); in kaudit_to_bsm()
1264 ar->ar_event = audit_msgctl_to_event(ar->ar_arg_svipc_cmd); in kaudit_to_bsm()
1269 tok = au_to_arg32(1, "msg ID", ar->ar_arg_svipc_id); in kaudit_to_bsm()
1271 if (ar->ar_errno != EINVAL) { in kaudit_to_bsm()
1272 tok = au_to_ipc(AT_IPC_MSG, ar->ar_arg_svipc_id); in kaudit_to_bsm()
1278 if (ar->ar_errno == 0) { in kaudit_to_bsm()
1281 ar->ar_arg_svipc_id); in kaudit_to_bsm()
1299 tok = au_to_arg32(3, "mode", ar->ar_arg_mode); in kaudit_to_bsm()
1311 tok = au_to_arg32(2, "flags", ar->ar_arg_fflags); in kaudit_to_bsm()
1324 tok = au_to_arg32(3, "mode", ar->ar_arg_mode); in kaudit_to_bsm()
1336 tok = au_to_arg32(2, "flags", ar->ar_arg_fflags); in kaudit_to_bsm()
1345 tok = au_to_arg32(1, "fd", ar->ar_arg_fd); in kaudit_to_bsm()
1349 tok = au_to_arg32(2, "signal", ar->ar_arg_signum); in kaudit_to_bsm()
1356 tok = au_to_arg32(0, "child PID", ar->ar_arg_pid); in kaudit_to_bsm()
1360 tok = au_to_arg32(2, "flags", ar->ar_arg_fflags); in kaudit_to_bsm()
1364 tok = au_to_arg32(1, "fd", ar->ar_arg_fd); in kaudit_to_bsm()
1370 tok = au_to_arg32(1, "fd", ar->ar_arg_fd); in kaudit_to_bsm()
1377 tok = au_to_arg32(1, "idtype", ar->ar_arg_value); in kaudit_to_bsm()
1381 tok = au_to_arg32(2, "com", ar->ar_arg_cmd); in kaudit_to_bsm()
1389 tok = au_to_arg32(1, "request", ar->ar_arg_cmd); in kaudit_to_bsm()
1393 tok = au_to_arg32(4, "data", ar->ar_arg_value); in kaudit_to_bsm()
1401 tok = au_to_arg32(2, "command", ar->ar_arg_cmd); in kaudit_to_bsm()
1405 tok = au_to_arg32(3, "uid", ar->ar_arg_uid); in kaudit_to_bsm()
1409 tok = au_to_arg32(3, "gid", ar->ar_arg_gid); in kaudit_to_bsm()
1417 tok = au_to_arg32(1, "howto", ar->ar_arg_cmd); in kaudit_to_bsm()
1423 ar->ar_event = audit_semctl_to_event(ar->ar_arg_svipc_cmd); in kaudit_to_bsm()
1428 tok = au_to_arg32(1, "sem ID", ar->ar_arg_svipc_id); in kaudit_to_bsm()
1430 if (ar->ar_errno != EINVAL) { in kaudit_to_bsm()
1432 ar->ar_arg_svipc_id); in kaudit_to_bsm()
1439 if (ar->ar_errno == 0) { in kaudit_to_bsm()
1442 ar->ar_arg_svipc_id); in kaudit_to_bsm()
1450 tok = au_to_arg32(1, "egid", ar->ar_arg_egid); in kaudit_to_bsm()
1457 tok = au_to_arg32(1, "euid", ar->ar_arg_euid); in kaudit_to_bsm()
1464 tok = au_to_arg32(1, "rgid", ar->ar_arg_rgid); in kaudit_to_bsm()
1468 tok = au_to_arg32(2, "egid", ar->ar_arg_egid); in kaudit_to_bsm()
1475 tok = au_to_arg32(1, "ruid", ar->ar_arg_ruid); in kaudit_to_bsm()
1479 tok = au_to_arg32(2, "euid", ar->ar_arg_euid); in kaudit_to_bsm()
1486 tok = au_to_arg32(1, "rgid", ar->ar_arg_rgid); in kaudit_to_bsm()
1490 tok = au_to_arg32(2, "egid", ar->ar_arg_egid); in kaudit_to_bsm()
1494 tok = au_to_arg32(3, "sgid", ar->ar_arg_sgid); in kaudit_to_bsm()
1501 tok = au_to_arg32(1, "ruid", ar->ar_arg_ruid); in kaudit_to_bsm()
1505 tok = au_to_arg32(2, "euid", ar->ar_arg_euid); in kaudit_to_bsm()
1509 tok = au_to_arg32(3, "suid", ar->ar_arg_suid); in kaudit_to_bsm()
1516 tok = au_to_arg32(1, "gid", ar->ar_arg_gid); in kaudit_to_bsm()
1523 tok = au_to_arg32(1, "uid", ar->ar_arg_uid); in kaudit_to_bsm()
1530 for(ctr = 0; ctr < ar->ar_arg_groups.gidset_size; ctr++) in kaudit_to_bsm()
1533 ar->ar_arg_groups.gidset[ctr]); in kaudit_to_bsm()
1541 tok = au_to_text(ar->ar_arg_login); in kaudit_to_bsm()
1551 tok = au_to_arg32(1, "which", ar->ar_arg_cmd); in kaudit_to_bsm()
1555 tok = au_to_arg32(2, "who", ar->ar_arg_uid); in kaudit_to_bsm()
1560 tok = au_to_arg32(3, "priority", ar->ar_arg_value); in kaudit_to_bsm()
1567 tok = au_to_arg32(1, "flag", ar->ar_arg_value); in kaudit_to_bsm()
1575 tok = au_to_arg32(1, "shmid", ar->ar_arg_svipc_id); in kaudit_to_bsm()
1578 tok = au_to_ipc(AT_IPC_SHM, ar->ar_arg_svipc_id); in kaudit_to_bsm()
1583 (int)(uintptr_t)ar->ar_arg_svipc_addr); in kaudit_to_bsm()
1587 tok = au_to_ipc_perm(&ar->ar_arg_svipc_perm); in kaudit_to_bsm()
1594 tok = au_to_arg32(1, "shmid", ar->ar_arg_svipc_id); in kaudit_to_bsm()
1597 tok = au_to_ipc(AT_IPC_SHM, ar->ar_arg_svipc_id); in kaudit_to_bsm()
1600 switch (ar->ar_arg_svipc_cmd) { in kaudit_to_bsm()
1602 ar->ar_event = AUE_SHMCTL_STAT; in kaudit_to_bsm()
1605 ar->ar_event = AUE_SHMCTL_RMID; in kaudit_to_bsm()
1608 ar->ar_event = AUE_SHMCTL_SET; in kaudit_to_bsm()
1610 tok = au_to_ipc_perm(&ar->ar_arg_svipc_perm); in kaudit_to_bsm()
1622 (int)(uintptr_t)ar->ar_arg_svipc_addr); in kaudit_to_bsm()
1630 tok = au_to_arg32(0, "shmid", ar->ar_arg_svipc_id); in kaudit_to_bsm()
1632 tok = au_to_ipc(AT_IPC_SHM, ar->ar_arg_svipc_id); in kaudit_to_bsm()
1636 tok = au_to_ipc_perm(&ar->ar_arg_svipc_perm); in kaudit_to_bsm()
1646 tok = au_to_arg32(2, "flags", ar->ar_arg_fflags); in kaudit_to_bsm()
1655 tok = au_to_arg32(2, "flags", ar->ar_arg_fflags); in kaudit_to_bsm()
1659 tok = au_to_arg32(3, "mode", ar->ar_arg_mode); in kaudit_to_bsm()
1669 perm.uid = ar->ar_arg_pipc_perm.pipc_uid; in kaudit_to_bsm()
1670 perm.gid = ar->ar_arg_pipc_perm.pipc_gid; in kaudit_to_bsm()
1671 perm.cuid = ar->ar_arg_pipc_perm.pipc_uid; in kaudit_to_bsm()
1672 perm.cgid = ar->ar_arg_pipc_perm.pipc_gid; in kaudit_to_bsm()
1673 perm.mode = ar->ar_arg_pipc_perm.pipc_mode; in kaudit_to_bsm()
1683 tok = au_to_arg32(2, "flags", ar->ar_arg_fflags); in kaudit_to_bsm()
1687 tok = au_to_arg32(3, "mode", ar->ar_arg_mode); in kaudit_to_bsm()
1691 tok = au_to_arg32(4, "value", ar->ar_arg_value); in kaudit_to_bsm()
1698 tok = au_to_text(ar->ar_arg_text); in kaudit_to_bsm()
1704 perm.uid = ar->ar_arg_pipc_perm.pipc_uid; in kaudit_to_bsm()
1705 perm.gid = ar->ar_arg_pipc_perm.pipc_gid; in kaudit_to_bsm()
1706 perm.cuid = ar->ar_arg_pipc_perm.pipc_uid; in kaudit_to_bsm()
1707 perm.cgid = ar->ar_arg_pipc_perm.pipc_gid; in kaudit_to_bsm()
1708 perm.mode = ar->ar_arg_pipc_perm.pipc_mode; in kaudit_to_bsm()
1718 tok = au_to_arg32(1, "sem", ar->ar_arg_fd); in kaudit_to_bsm()
1726 tok = au_to_text(ar->ar_arg_text); in kaudit_to_bsm()
1736 for (ctr = 0; ctr < ar->ar_arg_len; ctr++) { in kaudit_to_bsm()
1738 ar->ar_arg_ctlname[ctr]); in kaudit_to_bsm()
1743 tok = au_to_arg32(5, "newval", ar->ar_arg_value); in kaudit_to_bsm()
1747 tok = au_to_text(ar->ar_arg_text); in kaudit_to_bsm()
1754 tok = au_to_arg32(1, "new mask", ar->ar_arg_mask); in kaudit_to_bsm()
1757 tok = au_to_arg32(0, "prev mask", ar->ar_retval); in kaudit_to_bsm()
1765 tok = au_to_arg32(3, "options", ar->ar_arg_value); in kaudit_to_bsm()
1776 tok = au_to_rights(&ar->ar_arg_rights); in kaudit_to_bsm()
1786 tok = au_to_arg32(1, "fd", ar->ar_arg_fd); in kaudit_to_bsm()
1795 ar->ar_arg_fcntl_rights); in kaudit_to_bsm()
1812 ar->ar_event); in kaudit_to_bsm()
1827 tok = au_to_return32(au_errno_to_bsm(ar->ar_errno), ar->ar_retval); in kaudit_to_bsm()
1830 kau_close(rec, &ar->ar_endtime, ar->ar_event); in kaudit_to_bsm()