506 		if (tad->tad_flag && tad->tad_event == AUE_EXIT)  in audit_exit()
546 	ASSERT(tad->tad_event == 0);  in audit_core_start()
575 	tad->tad_event  = event;  in audit_core_start()
605 		tad->tad_event = 0;  in audit_core_finish()
636 	au_close(kctx, &(u_ad), flag, tad->tad_event, tad->tad_evmod, NULL);  in audit_core_finish()
643 	tad->tad_event = 0;  in audit_core_finish()
751 	if (tad->tad_event == AUE_CLOSE) {  in audit_closef()
873 		switch (tad->tad_event) {  in audit_setf()
875 			tad->tad_event = AUE_OPEN_R;  in audit_setf()
879 			tad->tad_event = AUE_OPEN_RT;  in audit_setf()
882 			tad->tad_event = AUE_OPEN_W;  in audit_setf()
885 			tad->tad_event = AUE_OPEN_WT;  in audit_setf()
888 			tad->tad_event = AUE_OPEN_RW;  in audit_setf()
891 			tad->tad_event = AUE_OPEN_RWT;  in audit_setf()
1000 	    tad->tad_event, tad->tad_evmod, NULL);  in audit_reboot()
1182 	if (!error && ((tad->tad_event == AUE_MKNOD) ||  in audit_vncreate_finish()
1183 	    (tad->tad_event == AUE_MKDIR))) {  in audit_vncreate_finish()
1232 		tad->tad_event = AUE_PFEXEC;  in audit_exec()
1502 			tad->tad_event = AUE_SOCKCONNECT;  in audit_sock()
1515 			tad->tad_event = AUE_SOCKACCEPT;  in audit_sock()
1528 			tad->tad_event = AUE_SOCKSEND;  in audit_sock()
1541 			tad->tad_event = AUE_SOCKRECEIVE;  in audit_sock()
1555 		tad->tad_event = AUE_GETMSG;  in audit_sock()
1566 		tad->tad_event = AUE_GETMSG;  in audit_sock()
1815 	tad->tad_event = AUE_CRYPTOADM;  in audit_cryptoadm()
1964 	tad->tad_event = AUE_CONFIGKSSL;  in audit_kssl()
2058 		tad->tad_event = AUE_PF_POLICY_ADDRULE;  in audit_pf_policy()
2063 		tad->tad_event = AUE_PF_POLICY_DELRULE;  in audit_pf_policy()
2068 		tad->tad_event = AUE_PF_POLICY_FLUSH;  in audit_pf_policy()
2073 		tad->tad_event = AUE_PF_POLICY_ALGS;  in audit_pf_policy()
2078 		tad->tad_event = AUE_PF_POLICY_CLONE;  in audit_pf_policy()
2083 		tad->tad_event = AUE_PF_POLICY_FLIP;  in audit_pf_policy()
2088 		tad->tad_event = AUE_NULL;  in audit_pf_policy()
2147 	au_close(kctx, (caddr_t *)&ad, flag, tad->tad_event, tad->tad_evmod,  in audit_pf_policy()
2155 	tad->tad_event = 0;  in audit_pf_policy()