Lines Matching refs:ar
582 struct kaudit_record *ar; in audit_session_event() local
597 ar = audit_new(event, PROC_NULL, /* Not used */ NULL); in audit_session_event()
598 if (NULL == ar) { in audit_session_event()
606 ar->k_ar_commit |= AR_PRESELECT_FILTER; in audit_session_event()
613 ar->k_ar.ar_subj_ruid = 0; in audit_session_event()
614 ar->k_ar.ar_subj_rgid = 0; in audit_session_event()
615 ar->k_ar.ar_subj_egid = 0; in audit_session_event()
616 ar->k_ar.ar_subj_pid = 0; in audit_session_event()
617 ar->k_ar.ar_subj_auid = aia_p->ai_auid; in audit_session_event()
618 ar->k_ar.ar_subj_asid = aia_p->ai_asid; in audit_session_event()
619 bcopy(&aia_p->ai_termid, &ar->k_ar.ar_subj_term_addr, in audit_session_event()
623 ar->k_ar.ar_arg_amask.am_success = aia_p->ai_mask.am_success; in audit_session_event()
624 ar->k_ar.ar_arg_amask.am_failure = aia_p->ai_mask.am_failure; in audit_session_event()
625 ARG_SET_VALID(ar, ARG_AMASK); in audit_session_event()
628 ar->k_ar.ar_arg_value64 = aia_p->ai_flags; in audit_session_event()
629 ARG_SET_VALID(ar, ARG_VALUE64); in audit_session_event()
633 audit_commit(ar, 0, 0); in audit_session_event()