505 		if (tad->tad_flag && tad->tad_event == AUE_EXIT)  in audit_exit()
545 	ASSERT(tad->tad_event == 0);  in audit_core_start()
574 	tad->tad_event  = event;  in audit_core_start()
604 		tad->tad_event = 0;  in audit_core_finish()
635 	au_close(kctx, &(u_ad), flag, tad->tad_event, tad->tad_evmod, NULL);  in audit_core_finish()
642 	tad->tad_event = 0;  in audit_core_finish()
750 	if (tad->tad_event == AUE_CLOSE) {  in audit_closef()
872 		switch (tad->tad_event) {  in audit_setf()
874 			tad->tad_event = AUE_OPEN_R;  in audit_setf()
878 			tad->tad_event = AUE_OPEN_RT;  in audit_setf()
881 			tad->tad_event = AUE_OPEN_W;  in audit_setf()
884 			tad->tad_event = AUE_OPEN_WT;  in audit_setf()
887 			tad->tad_event = AUE_OPEN_RW;  in audit_setf()
890 			tad->tad_event = AUE_OPEN_RWT;  in audit_setf()
999 	    tad->tad_event, tad->tad_evmod, NULL);  in audit_reboot()
1181 	if (!error && ((tad->tad_event == AUE_MKNOD) ||  in audit_vncreate_finish()
1182 	    (tad->tad_event == AUE_MKDIR))) {  in audit_vncreate_finish()
1231 		tad->tad_event = AUE_PFEXEC;  in audit_exec()
1501 			tad->tad_event = AUE_SOCKCONNECT;  in audit_sock()
1514 			tad->tad_event = AUE_SOCKACCEPT;  in audit_sock()
1527 			tad->tad_event = AUE_SOCKSEND;  in audit_sock()
1540 			tad->tad_event = AUE_SOCKRECEIVE;  in audit_sock()
1554 		tad->tad_event = AUE_GETMSG;  in audit_sock()
1565 		tad->tad_event = AUE_GETMSG;  in audit_sock()
1874 	tad->tad_event = AUE_CRYPTOADM;  in audit_cryptoadm()
2044 		tad->tad_event = AUE_PF_POLICY_ADDRULE;  in audit_pf_policy()
2049 		tad->tad_event = AUE_PF_POLICY_DELRULE;  in audit_pf_policy()
2054 		tad->tad_event = AUE_PF_POLICY_FLUSH;  in audit_pf_policy()
2059 		tad->tad_event = AUE_PF_POLICY_ALGS;  in audit_pf_policy()
2064 		tad->tad_event = AUE_PF_POLICY_CLONE;  in audit_pf_policy()
2069 		tad->tad_event = AUE_PF_POLICY_FLIP;  in audit_pf_policy()
2074 		tad->tad_event = AUE_NULL;  in audit_pf_policy()
2133 	au_close(kctx, (caddr_t *)&ad, flag, tad->tad_event, tad->tad_evmod,  in audit_pf_policy()
2141 	tad->tad_event = 0;  in audit_pf_policy()