Home
last modified time | relevance | path

Searched refs:AUDIT_ARG (Results 1 – 25 of 33) sorted by relevance

12

/xnu-10063.101.15/bsd/kern/
H A Dkern_prot.c136 AUDIT_ARG(value32, uap->flag); in setprivexec()
709 AUDIT_ARG(uid, want_uid); in setuid()
793 AUDIT_ARG(euid, want_euid); in seteuid()
869 AUDIT_ARG(euid, want_euid); in setreuid()
870 AUDIT_ARG(ruid, want_ruid); in setreuid()
960 AUDIT_ARG(gid, want_gid); in setgid()
1026 AUDIT_ARG(egid, want_egid); in setegid()
1106 AUDIT_ARG(egid, want_egid); in setregid()
1107 AUDIT_ARG(rgid, want_rgid); in setregid()
1233 AUDIT_ARG(uid, uap->uid); in sys_settid()
[all …]
H A Dkern_mman.c218 AUDIT_ARG(addr, user_addr); in mmap()
219 AUDIT_ARG(len, user_size); in mmap()
220 AUDIT_ARG(fd, uap->fd); in mmap()
539 AUDIT_ARG(vnpath, vp, ARG_VNODE1); in mmap()
1075 AUDIT_ARG(addr, user_addr); in munmap()
1076 AUDIT_ARG(len, user_size); in munmap()
1111 AUDIT_ARG(addr, uap->addr); in mprotect()
1112 AUDIT_ARG(len, uap->len); in mprotect()
1113 AUDIT_ARG(value32, uap->prot); in mprotect()
1215 AUDIT_ARG(addr, uap->addr); in minherit()
[all …]
H A Dkern_xxx.c112 AUDIT_ARG(cmd, uap->opt); in reboot()
173 AUDIT_ARG(addr, uap->addr); in sys_panic_with_data()
174 AUDIT_ARG(value32, uap->len); in sys_panic_with_data()
175 AUDIT_ARG(addr, uap->uuid); in sys_panic_with_data()
H A Dmach_process.c128 AUDIT_ARG(cmd, uap->req); in ptrace()
129 AUDIT_ARG(pid, uap->pid); in ptrace()
130 AUDIT_ARG(addr, uap->addr); in ptrace()
131 AUDIT_ARG(value32, uap->data); in ptrace()
252 AUDIT_ARG(process, t); in ptrace()
H A Dposix_sem.c396 AUDIT_ARG(fflags, uap->oflag); in sem_open()
397 AUDIT_ARG(mode, (mode_t)uap->mode); in sem_open()
398 AUDIT_ARG(value32, uap->value); in sem_open()
413 AUDIT_ARG(text, pnbuf); in sem_open()
519 AUDIT_ARG(posix_ipc_perm, pinfo->psem_uid, in sem_open()
561 AUDIT_ARG(posix_ipc_perm, pinfo->psem_uid, in sem_open()
682 AUDIT_ARG(posix_ipc_perm, pinfo->psem_uid, pinfo->psem_gid, in psem_unlink_internal()
723 AUDIT_ARG(text, pnbuf); in sem_unlink()
788 AUDIT_ARG(fd, fd); /* XXX This seems wrong; uap->sem is a pointer */ in sem_close()
H A Dsysv_shm.c328 AUDIT_ARG(svipc_addr, uap->shmaddr); in shmdt()
394 AUDIT_ARG(svipc_id, uap->shmid); in shmat()
395 AUDIT_ARG(svipc_addr, uap->shmaddr); in shmat()
435 AUDIT_ARG(svipc_perm, &shmseg->u.shm_perm); in shmat()
598 AUDIT_ARG(svipc_cmd, uap->cmd); in shmctl()
599 AUDIT_ARG(svipc_id, uap->shmid); in shmctl()
616 AUDIT_ARG(svipc_perm, &shmseg->u.shm_perm); in shmctl()
855 AUDIT_ARG(svipc_perm, &shmseg->u.shm_perm); in shmget_allocate_segment()
865 AUDIT_ARG(svipc_id, shmid); in shmget_allocate_segment()
H A Duipc_syscalls.c280 AUDIT_ARG(socket, domain, type, protocol); in socket_common()
352 AUDIT_ARG(fd, uap->s); in bind()
377 AUDIT_ARG(sockaddr, vfs_context_cwd(vfs_context_current()), sa); in bind()
411 AUDIT_ARG(fd, uap->s); in listen()
469 AUDIT_ARG(fd, uap->s); in accept_nocancel()
666 AUDIT_ARG(sockaddr, vfs_context_cwd(vfs_context_current()), sa); in accept_nocancel()
764 AUDIT_ARG(fd, uap->s); in connect_nocancel()
823 AUDIT_ARG(fd, uap->socket); in connectx_nocancel()
1005 AUDIT_ARG(sockaddr, vfs_context_cwd(vfs_context_current()), sa); in connectit()
1061 AUDIT_ARG(sockaddr, vfs_context_cwd(vfs_context_current()), dst); in connectitx()
[all …]
H A Dposix_shm.c328 AUDIT_ARG(text, &pinfo->pshm_hdr.pshm_name[0]); in pshm_get_name()
349 AUDIT_ARG(fflags, uap->oflag); in shm_open()
350 AUDIT_ARG(mode, cmode); in shm_open()
464 AUDIT_ARG(posix_ipc_perm, pinfo->pshm_uid, in shm_open()
988 AUDIT_ARG(posix_ipc_perm, pinfo->pshm_uid, pinfo->pshm_gid, pinfo->pshm_mode); in shm_unlink()
H A Dkern_descrip.c2642 AUDIT_ARG(vnpath_withref, vp, ARG_VNODE1); in sys_fcntl_outdrop()
2717 AUDIT_ARG(fflags, fopen.o_flags); in sys_fcntl__OPENFROM()
2718 AUDIT_ARG(mode, fopen.o_mode); in sys_fcntl__OPENFROM()
2764 AUDIT_ARG(fd, uap->fd); in sys_fcntl_nocancel()
2765 AUDIT_ARG(cmd, uap->cmd); in sys_fcntl_nocancel()
2806 AUDIT_ARG(value32, newmin); in sys_fcntl_nocancel()
2825 AUDIT_ARG(value32, (uint32_t)uap->arg); in sys_fcntl_nocancel()
2859 AUDIT_ARG(value32, tmp); in sys_fcntl_nocancel()
2892 AUDIT_ARG(value32, tmp); in sys_fcntl_nocancel()
3483 AUDIT_ARG(value64, offset); in sys_fcntl_nocancel()
[all …]
H A Dsysv_msg.c393 AUDIT_ARG(svipc_cmd, cmd); in msgctl()
394 AUDIT_ARG(svipc_id, msqid); in msgctl()
695 AUDIT_ARG(svipc_id, *retval); in msgget()
736 AUDIT_ARG(svipc_id, msqid); in msgsnd_nocancel()
1166 AUDIT_ARG(svipc_id, msqid); in msgrcv_nocancel()
H A Dsysv_sem.c590 AUDIT_ARG(svipc_cmd, cmd); in semctl()
591 AUDIT_ARG(svipc_id, semid); in semctl()
962 AUDIT_ARG(svipc_id, *retval); in semget()
986 AUDIT_ARG(svipc_id, uap->semid); in semop()
H A Dsys_generic.c231 AUDIT_ARG(fd, fd); in preparefileread()
527 AUDIT_ARG(fd, fd); in preparefilewrite()
857 AUDIT_ARG(fd, uap->fd); in ioctl()
858 AUDIT_ARG(addr, uap->data); in ioctl()
863 AUDIT_ARG(value64, com); in ioctl()
865 AUDIT_ARG(cmd, CAST_DOWN_EXPLICIT(int, com)); in ioctl()
922 AUDIT_ARG(file, p, fp); in ioctl()
H A Dkern_guarded.c699 AUDIT_ARG(fd, uap->fd); in guarded_write_np()
720 AUDIT_ARG(fd, uap->fd); in guarded_pwrite_np()
746 AUDIT_ARG(fd, uap->fd); in guarded_writev_np()
H A Dkern_sig.c1378 AUDIT_ARG(pid, uap->pid); in kill()
1379 AUDIT_ARG(signum, uap->signum); in kill()
1396 AUDIT_ARG(process, p); in kill()
1563 AUDIT_ARG(pid, target_pid); in terminate_with_payload_internal()
1573 AUDIT_ARG(process, target_proc); in terminate_with_payload_internal()
H A Dkern_resource.c405 AUDIT_ARG(cmd, uap->which); in setpriority()
406 AUDIT_ARG(owner, uap->who, 0); in setpriority()
407 AUDIT_ARG(value32, uap->prio); in setpriority()
H A Dkern_authorization.c1035 AUDIT_ARG(opaque, fsec, copysize); in kauth_copyinfilesec()
/xnu-10063.101.15/bsd/skywalk/nexus/
H A Dnexus_syscalls.c180 AUDIT_ARG(fd, uap->ctl); in __nexus_register()
257 AUDIT_ARG(fd, uap->ctl); in __nexus_deregister()
303 AUDIT_ARG(fd, uap->ctl); in __nexus_create()
369 AUDIT_ARG(fd, uap->ctl); in __nexus_destroy()
416 AUDIT_ARG(fd, uap->ctl); in __nexus_get_opt()
486 AUDIT_ARG(fd, uap->ctl); in __nexus_set_opt()
/xnu-10063.101.15/bsd/vfs/
H A Dvfs_syscalls.c411 AUDIT_ARG(fd, uap->fd); in fmount()
412 AUDIT_ARG(fflags, flags); in fmount()
901 AUDIT_ARG(mac_string, labelstr); in __mac_mount()
905 AUDIT_ARG(fflags, flags); in __mac_mount()
1142 AUDIT_ARG(text, (char *)(uintptr_t)fstypename); in mount_common()
3299 AUDIT_ARG(uid, uap->uid); in quotactl()
3300 AUDIT_ARG(cmd, uap->cmd); in quotactl()
3468 AUDIT_ARG(fd, uap->fd); in fstatfs()
3475 AUDIT_ARG(vnpath_withref, vp, ARG_VNODE1); in fstatfs()
3599 AUDIT_ARG(fd, uap->fd); in fstatfs64()
[all …]
H A Dvfs_lookup.c325 AUDIT_ARG(upath, ut->uu_cdir, cnp->cn_pnbuf, ARG_UPATH1); in namei()
328 AUDIT_ARG(upath, ut->uu_cdir, cnp->cn_pnbuf, ARG_UPATH2); in namei()
937 AUDIT_ARG(vnpath, dp, ARG_VNODE1); in lookup_handle_found_vnode()
939 AUDIT_ARG(vnpath, dp, ARG_VNODE2); in lookup_handle_found_vnode()
1018 AUDIT_ARG(vnpath, dp, ARG_VNODE1); in lookup_handle_emptyname()
1020 AUDIT_ARG(vnpath, dp, ARG_VNODE2); in lookup_handle_emptyname()
2193 AUDIT_ARG(vnpath, vp, ARG_VNODE1);
2195 AUDIT_ARG(vnpath, vp, ARG_VNODE2);
/xnu-10063.101.15/security/
H A Dmac_base.c1195 AUDIT_ARG(mac_string, input); in mac_do_get()
1231 AUDIT_ARG(mac_string, input); in mac_do_set()
1249 AUDIT_ARG(pid, uap->pid); in __mac_get_pid()
1312 AUDIT_ARG(fd, uap->fd); in __mac_get_fd()
1417 AUDIT_ARG(fd, uap->fd); in __mac_set_fd()
1576 AUDIT_ARG(value32, uap->call); in __mac_syscall()
1577 AUDIT_ARG(mac_string, target); in __mac_syscall()
/xnu-10063.101.15/bsd/skywalk/channel/
H A Dchannel_syscalls.c299 AUDIT_ARG(fd, uap->c); in __channel_get_info()
378 AUDIT_ARG(fd, uap->c); in __channel_sync()
685 AUDIT_ARG(fd, uap->c); in __channel_get_opt()
748 AUDIT_ARG(fd, uap->c); in __channel_set_opt()
/xnu-10063.101.15/bsd/security/audit/
H A Daudit_syscalls.c375 AUDIT_ARG(cmd, uap->cmd); in auditon()
422 AUDIT_ARG(auditon, &udata); in auditon()
423 AUDIT_ARG(len, uap->length); in auditon()
1028 AUDIT_ARG(auid, id); in setauid()
1109 AUDIT_ARG(auditinfo_addr, &aia); in setaudit_addr()
H A Daudit.h332 #define AUDIT_ARG(op, args...) do { \ macro
397 #define AUDIT_ARG(op, args...) do { \ macro
H A Daudit.c698 AUDIT_ARG(identity); in audit_syscall_enter()
/xnu-10063.101.15/bsd/vm/
H A Dvm_unix.c794 AUDIT_ARG(mach_port1, t); in pid_for_task()
815 AUDIT_ARG(pid, pid); in pid_for_task()
957 AUDIT_ARG(pid, pid); in task_for_pid()
958 AUDIT_ARG(mach_port1, target_tport); in task_for_pid()
984 AUDIT_ARG(process, p); in task_for_pid()
1080 AUDIT_ARG(mach_port2, tret); in task_for_pid()
1123 AUDIT_ARG(pid, pid); in task_name_for_pid()
1124 AUDIT_ARG(mach_port1, target_tport); in task_name_for_pid()
1135 AUDIT_ARG(process, p); in task_name_for_pid()
1169 AUDIT_ARG(mach_port2, tret); in task_name_for_pid()
[all …]

12