Home
last modified time | relevance | path

Searched refs:k_ar (Results 1 – 6 of 6) sorted by relevance

/freebsd/sys/security/audit/
H A Daudit_arg.c78 ar->k_ar.ar_arg_addr = addr; in audit_arg_addr()
91 ar->k_ar.ar_arg_exitstatus = status; in audit_arg_exit()
92 ar->k_ar.ar_arg_exitretval = retval; in audit_arg_exit()
105 ar->k_ar.ar_arg_len = len; in audit_arg_len()
118 ar->k_ar.ar_arg_atfd1 = atfd; in audit_arg_atfd1()
131 ar->k_ar.ar_arg_atfd2 = atfd; in audit_arg_atfd2()
144 ar->k_ar.ar_arg_fd = fd; in audit_arg_fd()
157 ar->k_ar.ar_arg_fflags = fflags; in audit_arg_fflags()
170 ar->k_ar.ar_arg_gid = gid; in audit_arg_gid()
183 ar->k_ar.ar_arg_uid = uid; in audit_arg_uid()
[all …]
H A Daudit.c272 ar->k_ar.ar_magic = AUDIT_RECORD_MAGIC; in audit_record_ctor()
273 nanotime(&ar->k_ar.ar_starttime); in audit_record_ctor()
279 cru2x(cred, &ar->k_ar.ar_subj_cred); in audit_record_ctor()
280 ar->k_ar.ar_subj_ruid = cred->cr_ruid; in audit_record_ctor()
281 ar->k_ar.ar_subj_rgid = cred->cr_rgid; in audit_record_ctor()
282 ar->k_ar.ar_subj_egid = cred->cr_groups[0]; in audit_record_ctor()
283 ar->k_ar.ar_subj_auid = cred->cr_audit.ai_auid; in audit_record_ctor()
284 ar->k_ar.ar_subj_asid = cred->cr_audit.ai_asid; in audit_record_ctor()
285 ar->k_ar.ar_subj_pid = td->td_proc->p_pid; in audit_record_ctor()
286 ar->k_ar.ar_subj_amask = cred->cr_audit.ai_mask; in audit_record_ctor()
[all …]
H A Daudit_private.h311 #define ARG_IS_VALID(kar, arg) ((kar)->k_ar.ar_valid_arg & (arg))
313 (kar)->k_ar.ar_valid_arg |= (arg); \
316 (kar)->k_ar.ar_valid_arg &= ~(arg); \
325 struct audit_record k_ar; member
H A Daudit_worker.c374 auid = ar->k_ar.ar_subj_auid; in audit_worker_process_record()
375 event = ar->k_ar.ar_event; in audit_worker_process_record()
377 if (ar->k_ar.ar_errno == 0) in audit_worker_process_record()
H A Daudit_dtrace.c243 (uintptr_t)ene_name_lower, (uintptr_t)&kar->k_ar, 0, 0, 0); in dtaudit_commit()
285 (uintptr_t)&kar->k_ar, (uintptr_t)bsm_data, (uintptr_t)bsm_len, in dtaudit_bsm()
H A Daudit_bsm.c476 ar = &kar->k_ar; in kaudit_to_bsm()