| /xnu-12377.81.4/bsd/kern/ |
| H A D | kern_xxx.c | 112 AUDIT_ARG(cmd, uap->opt); in reboot() 174 AUDIT_ARG(addr, uap->addr); in sys_panic_with_data() 175 AUDIT_ARG(value32, uap->len); in sys_panic_with_data() 176 AUDIT_ARG(addr, uap->uuid); in sys_panic_with_data() 177 AUDIT_ARG(value32, uap->flags); in sys_panic_with_data()
|
| H A D | kern_prot.c | 139 AUDIT_ARG(value32, uap->flag); in setprivexec() 712 AUDIT_ARG(uid, want_uid); in setuid() 798 AUDIT_ARG(euid, want_euid); in seteuid() 873 AUDIT_ARG(euid, want_euid); in setreuid() 874 AUDIT_ARG(ruid, want_ruid); in setreuid() 965 AUDIT_ARG(gid, want_gid); in setgid() 1031 AUDIT_ARG(egid, want_egid); in setegid() 1111 AUDIT_ARG(egid, want_egid); in setregid() 1112 AUDIT_ARG(rgid, want_rgid); in setregid() 1238 AUDIT_ARG(uid, uap->uid); in sys_settid() [all …]
|
| H A D | kern_mman.c | 317 AUDIT_ARG(addr, VM_SANITIZE_UNSAFE_UNWRAP(uap->addr)); in mmap() 318 AUDIT_ARG(len, VM_SANITIZE_UNSAFE_UNWRAP(uap->len)); in mmap() 319 AUDIT_ARG(fd, uap->fd); in mmap() 574 AUDIT_ARG(vnpath, vp, ARG_VNODE1); in mmap() 1129 AUDIT_ARG(addr, VM_SANITIZE_UNSAFE_UNWRAP(uap->addr)); in munmap() 1130 AUDIT_ARG(len, VM_SANITIZE_UNSAFE_UNWRAP(uap->len)); in munmap() 1207 AUDIT_ARG(addr, VM_SANITIZE_UNSAFE_UNWRAP(uap->addr)); in mprotect() 1208 AUDIT_ARG(len, VM_SANITIZE_UNSAFE_UNWRAP(uap->len)); in mprotect() 1209 AUDIT_ARG(value32, uap->prot); in mprotect() 1365 AUDIT_ARG(addr, VM_SANITIZE_UNSAFE_UNWRAP(uap->addr)); in minherit() [all …]
|
| H A D | mach_process.c | 129 AUDIT_ARG(cmd, uap->req); in ptrace() 130 AUDIT_ARG(pid, uap->pid); in ptrace() 131 AUDIT_ARG(addr, uap->addr); in ptrace() 132 AUDIT_ARG(value32, uap->data); in ptrace() 254 AUDIT_ARG(process, t); in ptrace()
|
| H A D | posix_sem.c | 555 AUDIT_ARG(fflags, uap->oflag); in sem_open() 556 AUDIT_ARG(mode, (mode_t)uap->mode); in sem_open() 557 AUDIT_ARG(value32, uap->value); in sem_open() 572 AUDIT_ARG(text, pnbuf); in sem_open() 678 AUDIT_ARG(posix_ipc_perm, pinfo->psem_uid, in sem_open() 720 AUDIT_ARG(posix_ipc_perm, pinfo->psem_uid, in sem_open() 841 AUDIT_ARG(posix_ipc_perm, pinfo->psem_uid, pinfo->psem_gid, in psem_unlink_internal() 892 AUDIT_ARG(text, pnbuf); in sem_unlink() 957 AUDIT_ARG(fd, fd); /* XXX This seems wrong; uap->sem is a pointer */ in sem_close()
|
| H A D | sysv_shm.c | 329 AUDIT_ARG(svipc_addr, uap->shmaddr); in shmdt() 395 AUDIT_ARG(svipc_id, uap->shmid); in shmat() 396 AUDIT_ARG(svipc_addr, uap->shmaddr); in shmat() 436 AUDIT_ARG(svipc_perm, &shmseg->u.shm_perm); in shmat() 599 AUDIT_ARG(svipc_cmd, uap->cmd); in shmctl() 600 AUDIT_ARG(svipc_id, uap->shmid); in shmctl() 617 AUDIT_ARG(svipc_perm, &shmseg->u.shm_perm); in shmctl() 856 AUDIT_ARG(svipc_perm, &shmseg->u.shm_perm); in shmget_allocate_segment() 866 AUDIT_ARG(svipc_id, shmid); in shmget_allocate_segment()
|
| H A D | uipc_syscalls.c | 282 AUDIT_ARG(socket, domain, type, protocol); in socket_common() 354 AUDIT_ARG(fd, uap->s); in bind() 379 AUDIT_ARG(sockaddr, vfs_context_cwd(vfs_context_current()), sa); in bind() 413 AUDIT_ARG(fd, uap->s); in listen() 471 AUDIT_ARG(fd, uap->s); in accept_nocancel() 673 AUDIT_ARG(sockaddr, vfs_context_cwd(vfs_context_current()), sa); in accept_nocancel() 774 AUDIT_ARG(fd, uap->s); in connect_nocancel() 833 AUDIT_ARG(fd, uap->socket); in connectx_nocancel() 1015 AUDIT_ARG(sockaddr, vfs_context_cwd(vfs_context_current()), sa); in connectit() 1071 AUDIT_ARG(sockaddr, vfs_context_cwd(vfs_context_current()), dst); in connectitx() [all …]
|
| H A D | posix_shm.c | 330 AUDIT_ARG(text, &pinfo->pshm_hdr.pshm_name[0]); in pshm_get_name() 351 AUDIT_ARG(fflags, uap->oflag); in shm_open() 352 AUDIT_ARG(mode, cmode); in shm_open() 466 AUDIT_ARG(posix_ipc_perm, pinfo->pshm_uid, in shm_open() 989 AUDIT_ARG(posix_ipc_perm, pinfo->pshm_uid, pinfo->pshm_gid, pinfo->pshm_mode); in shm_unlink()
|
| H A D | kern_descrip.c | 2667 AUDIT_ARG(vnpath_withref, vp, ARG_VNODE1); in sys_fcntl_outdrop() 2742 AUDIT_ARG(fflags, fopen.o_flags); in sys_fcntl__OPENFROM() 2743 AUDIT_ARG(mode, fopen.o_mode); in sys_fcntl__OPENFROM() 2791 AUDIT_ARG(fd, uap->fd); in sys_fcntl_nocancel() 2792 AUDIT_ARG(cmd, uap->cmd); in sys_fcntl_nocancel() 2833 AUDIT_ARG(value32, newmin); in sys_fcntl_nocancel() 2852 AUDIT_ARG(value32, (uint32_t)uap->arg); in sys_fcntl_nocancel() 2886 AUDIT_ARG(value32, tmp); in sys_fcntl_nocancel() 2919 AUDIT_ARG(value32, tmp); in sys_fcntl_nocancel() 3526 AUDIT_ARG(value64, offset); in sys_fcntl_nocancel() [all …]
|
| H A D | sysv_msg.c | 393 AUDIT_ARG(svipc_cmd, cmd); in msgctl() 394 AUDIT_ARG(svipc_id, msqid); in msgctl() 695 AUDIT_ARG(svipc_id, *retval); in msgget() 736 AUDIT_ARG(svipc_id, msqid); in msgsnd_nocancel() 1166 AUDIT_ARG(svipc_id, msqid); in msgrcv_nocancel()
|
| H A D | sysv_sem.c | 590 AUDIT_ARG(svipc_cmd, cmd); in semctl() 591 AUDIT_ARG(svipc_id, semid); in semctl() 962 AUDIT_ARG(svipc_id, *retval); in semget() 986 AUDIT_ARG(svipc_id, uap->semid); in semop()
|
| H A D | kern_proc.c | 5632 AUDIT_ARG(mach_port1, t); in pid_for_task() 5653 AUDIT_ARG(pid, pid); in pid_for_task() 5828 AUDIT_ARG(pid, pid); in task_for_pid() 5829 AUDIT_ARG(mach_port1, target_tport); in task_for_pid() 5855 AUDIT_ARG(process, p); in task_for_pid() 5946 AUDIT_ARG(mach_port2, tret); in task_for_pid() 5989 AUDIT_ARG(pid, pid); in task_name_for_pid() 5990 AUDIT_ARG(mach_port1, target_tport); in task_name_for_pid() 6001 AUDIT_ARG(process, p); in task_name_for_pid() 6035 AUDIT_ARG(mach_port2, tret); in task_name_for_pid() [all …]
|
| H A D | sys_generic.c | 234 AUDIT_ARG(fd, fd); in preparefileread() 530 AUDIT_ARG(fd, fd); in preparefilewrite() 860 AUDIT_ARG(fd, uap->fd); in ioctl() 861 AUDIT_ARG(addr, uap->data); in ioctl() 866 AUDIT_ARG(value64, com); in ioctl() 868 AUDIT_ARG(cmd, CAST_DOWN_EXPLICIT(int, com)); in ioctl() 925 AUDIT_ARG(file, p, fp); in ioctl()
|
| H A D | kern_guarded.c | 707 AUDIT_ARG(fd, uap->fd); in guarded_write_np() 728 AUDIT_ARG(fd, uap->fd); in guarded_pwrite_np() 754 AUDIT_ARG(fd, uap->fd); in guarded_writev_np()
|
| H A D | kern_sig.c | 1386 AUDIT_ARG(pid, uap->pid); in kill() 1387 AUDIT_ARG(signum, uap->signum); in kill() 1404 AUDIT_ARG(process, p); in kill() 1571 AUDIT_ARG(pid, target_pid); in terminate_with_payload_internal() 1581 AUDIT_ARG(process, target_proc); in terminate_with_payload_internal()
|
| H A D | kern_authorization.c | 1008 AUDIT_ARG(opaque, fsec, copysize); in kauth_copyinfilesec()
|
| H A D | kern_resource.c | 477 AUDIT_ARG(cmd, uap->which); in setpriority() 478 AUDIT_ARG(owner, uap->who, 0); in setpriority() 479 AUDIT_ARG(value32, uap->prio); in setpriority()
|
| /xnu-12377.81.4/bsd/skywalk/nexus/ |
| H A D | nexus_syscalls.c | 180 AUDIT_ARG(fd, uap->ctl); in __nexus_register() 257 AUDIT_ARG(fd, uap->ctl); in __nexus_deregister() 303 AUDIT_ARG(fd, uap->ctl); in __nexus_create() 369 AUDIT_ARG(fd, uap->ctl); in __nexus_destroy() 416 AUDIT_ARG(fd, uap->ctl); in __nexus_get_opt() 486 AUDIT_ARG(fd, uap->ctl); in __nexus_set_opt()
|
| /xnu-12377.81.4/bsd/vfs/ |
| H A D | vfs_syscalls.c | 420 AUDIT_ARG(fd, uap->fd); in fmount() 421 AUDIT_ARG(fflags, flags); in fmount() 1024 AUDIT_ARG(mac_string, labelstr); in __mac_mount() 1028 AUDIT_ARG(fflags, flags); in __mac_mount() 1304 AUDIT_ARG(text, (char *)(uintptr_t)fstypename); in mount_common() 2854 AUDIT_ARG(fd, uap->fd); in funmount() 2855 AUDIT_ARG(fflags, uap->flags); in funmount() 3590 AUDIT_ARG(uid, uap->uid); in quotactl() 3591 AUDIT_ARG(cmd, uap->cmd); in quotactl() 3759 AUDIT_ARG(fd, uap->fd); in fstatfs() [all …]
|
| H A D | vfs_lookup.c | 458 AUDIT_ARG(upath, ut->uu_cdir, cnp->cn_pnbuf, ARG_UPATH1); in namei() 461 AUDIT_ARG(upath, ut->uu_cdir, cnp->cn_pnbuf, ARG_UPATH2); in namei() 1141 AUDIT_ARG(vnpath, dp, ARG_VNODE1); in lookup_handle_found_vnode() 1143 AUDIT_ARG(vnpath, dp, ARG_VNODE2); in lookup_handle_found_vnode() 1222 AUDIT_ARG(vnpath, dp, ARG_VNODE1); in lookup_handle_emptyname() 1224 AUDIT_ARG(vnpath, dp, ARG_VNODE2); in lookup_handle_emptyname() 2493 AUDIT_ARG(vnpath, vp, ARG_VNODE1); 2495 AUDIT_ARG(vnpath, vp, ARG_VNODE2);
|
| /xnu-12377.81.4/security/ |
| H A D | mac_base.c | 1195 AUDIT_ARG(mac_string, input); in mac_do_get() 1231 AUDIT_ARG(mac_string, input); in mac_do_set() 1249 AUDIT_ARG(pid, uap->pid); in __mac_get_pid() 1312 AUDIT_ARG(fd, uap->fd); in __mac_get_fd() 1417 AUDIT_ARG(fd, uap->fd); in __mac_set_fd() 1576 AUDIT_ARG(value32, uap->call); in __mac_syscall() 1577 AUDIT_ARG(mac_string, target); in __mac_syscall()
|
| /xnu-12377.81.4/bsd/skywalk/channel/ |
| H A D | channel_syscalls.c | 294 AUDIT_ARG(fd, uap->c); in __channel_get_info() 373 AUDIT_ARG(fd, uap->c); in __channel_sync() 680 AUDIT_ARG(fd, uap->c); in __channel_get_opt() 743 AUDIT_ARG(fd, uap->c); in __channel_set_opt()
|
| /xnu-12377.81.4/bsd/security/audit/ |
| H A D | audit_syscalls.c | 375 AUDIT_ARG(cmd, uap->cmd); in auditon() 422 AUDIT_ARG(auditon, &udata); in auditon() 423 AUDIT_ARG(len, uap->length); in auditon() 1028 AUDIT_ARG(auid, id); in setauid() 1109 AUDIT_ARG(auditinfo_addr, &aia); in setaudit_addr()
|
| H A D | audit.h | 332 #define AUDIT_ARG(op, args...) do { \ macro 397 #define AUDIT_ARG(op, args...) do { \ macro
|
| H A D | audit.c | 698 AUDIT_ARG(identity); in audit_syscall_enter()
|