Lines Matching refs:ar
566 struct kaudit_record *ar; in audit_session_event() local
581 ar = audit_new(event, PROC_NULL, /* Not used */ NULL); in audit_session_event()
582 if (NULL == ar) { in audit_session_event()
590 ar->k_ar_commit |= AR_PRESELECT_FILTER; in audit_session_event()
597 ar->k_ar.ar_subj_ruid = 0; in audit_session_event()
598 ar->k_ar.ar_subj_rgid = 0; in audit_session_event()
599 ar->k_ar.ar_subj_egid = 0; in audit_session_event()
600 ar->k_ar.ar_subj_pid = 0; in audit_session_event()
601 ar->k_ar.ar_subj_auid = aia_p->ai_auid; in audit_session_event()
602 ar->k_ar.ar_subj_asid = aia_p->ai_asid; in audit_session_event()
603 bcopy(&aia_p->ai_termid, &ar->k_ar.ar_subj_term_addr, in audit_session_event()
607 ar->k_ar.ar_arg_amask.am_success = aia_p->ai_mask.am_success; in audit_session_event()
608 ar->k_ar.ar_arg_amask.am_failure = aia_p->ai_mask.am_failure; in audit_session_event()
609 ARG_SET_VALID(ar, ARG_AMASK); in audit_session_event()
612 ar->k_ar.ar_arg_value64 = aia_p->ai_flags; in audit_session_event()
613 ARG_SET_VALID(ar, ARG_VALUE64); in audit_session_event()
617 audit_commit(ar, 0, 0); in audit_session_event()