Lines Matching refs:ar
571 struct kaudit_record *ar; in audit_session_event() local
586 ar = audit_new(event, PROC_NULL, /* Not used */ NULL); in audit_session_event()
587 if (NULL == ar) { in audit_session_event()
595 ar->k_ar_commit |= AR_PRESELECT_FILTER; in audit_session_event()
602 ar->k_ar.ar_subj_ruid = 0; in audit_session_event()
603 ar->k_ar.ar_subj_rgid = 0; in audit_session_event()
604 ar->k_ar.ar_subj_egid = 0; in audit_session_event()
605 ar->k_ar.ar_subj_pid = 0; in audit_session_event()
606 ar->k_ar.ar_subj_auid = aia_p->ai_auid; in audit_session_event()
607 ar->k_ar.ar_subj_asid = aia_p->ai_asid; in audit_session_event()
608 bcopy(&aia_p->ai_termid, &ar->k_ar.ar_subj_term_addr, in audit_session_event()
612 ar->k_ar.ar_arg_amask.am_success = aia_p->ai_mask.am_success; in audit_session_event()
613 ar->k_ar.ar_arg_amask.am_failure = aia_p->ai_mask.am_failure; in audit_session_event()
614 ARG_SET_VALID(ar, ARG_AMASK); in audit_session_event()
617 ar->k_ar.ar_arg_value64 = aia_p->ai_flags; in audit_session_event()
618 ARG_SET_VALID(ar, ARG_VALUE64); in audit_session_event()
622 audit_commit(ar, 0, 0); in audit_session_event()