Lines Matching refs:ar
322 audit_worker_process_record(struct kaudit_record *ar) in audit_worker_process_record() argument
336 if (((ar->k_ar_commit & AR_COMMIT_USER) && in audit_worker_process_record()
337 (ar->k_ar_commit & AR_PRESELECT_USER_TRAIL)) || in audit_worker_process_record()
338 (ar->k_ar_commit & AR_PRESELECT_TRAIL)) { in audit_worker_process_record()
349 if ((ar->k_ar_commit & AR_COMMIT_USER) && in audit_worker_process_record()
350 (ar->k_ar_commit & AR_PRESELECT_USER_TRAIL)) { in audit_worker_process_record()
352 audit_record_write(audit_vp, &audit_ctx, ar->k_udata, in audit_worker_process_record()
353 ar->k_ulen); in audit_worker_process_record()
356 if ((ar->k_ar_commit & AR_COMMIT_USER) && in audit_worker_process_record()
357 (ar->k_ar_commit & AR_PRESELECT_USER_PIPE)) { in audit_worker_process_record()
358 audit_pipe_submit_user(ar->k_udata, ar->k_ulen); in audit_worker_process_record()
361 if (!(ar->k_ar_commit & AR_COMMIT_KERNEL) || in audit_worker_process_record()
362 ((ar->k_ar_commit & AR_PRESELECT_PIPE) == 0 && in audit_worker_process_record()
363 (ar->k_ar_commit & AR_PRESELECT_TRAIL) == 0 && in audit_worker_process_record()
364 (ar->k_ar_commit & AR_PRESELECT_FILTER) == 0)) { in audit_worker_process_record()
368 auid = ar->k_ar.ar_subj_auid; in audit_worker_process_record()
369 event = ar->k_ar.ar_event; in audit_worker_process_record()
371 if (ar->k_ar.ar_errno == 0) { in audit_worker_process_record()
377 error = kaudit_to_bsm(ar, &bsm); in audit_worker_process_record()
393 if (ar->k_ar_commit & AR_PRESELECT_TRAIL) { in audit_worker_process_record()
398 if (ar->k_ar_commit & AR_PRESELECT_PIPE) { in audit_worker_process_record()
400 ar->k_ar_commit & AR_PRESELECT_TRAIL, bsm->data, in audit_worker_process_record()
404 if (ar->k_ar_commit & AR_PRESELECT_FILTER) { in audit_worker_process_record()
409 audit_sdev_submit(auid, ar->k_ar.ar_subj_asid, bsm->data, in audit_worker_process_record()
434 struct kaudit_record *ar; in audit_worker() local
462 while ((ar = TAILQ_FIRST(&audit_q))) { in audit_worker()
463 TAILQ_REMOVE(&audit_q, ar, k_q); in audit_worker()
468 TAILQ_INSERT_TAIL(&ar_worklist, ar, k_q); in audit_worker()
475 while ((ar = TAILQ_FIRST(&ar_worklist))) { in audit_worker()
476 TAILQ_REMOVE(&ar_worklist, ar, k_q); in audit_worker()
477 if (ar->k_ar_commit & AR_DRAIN_QUEUE) { in audit_worker()
481 audit_worker_process_record(ar); in audit_worker()
482 audit_free(ar); in audit_worker()