Lines Matching full:syscall

26    a per-task filter.  At syscall entry, the audit_state is augmented by
27    the syscall filter. */
30 				 * No syscall-specific audit records can
33 				 * and fill it in at syscall
35 				 * syscall record available if some
39 				 * always fill it in at syscall entry
41 				 * record at syscall exit time.  */
92 	 * should be freed on syscall exit.
107 		AUDIT_CTX_SYSCALL,	/* in use by syscall */
112 	int		    major;      /* syscall number */
114 	struct timespec64   ctime;      /* time of syscall entry */
115 	unsigned long	    argv[4];    /* syscall arguments */
116 	long		    return_code;/* syscall return code */
121 	 * syscall.  The first AUDIT_NAMES entries in the names_list will
231 extern int audit_match_class(int class, unsigned syscall);