| /xnu-8792.41.9/bsd/security/audit/ |
| H A D | audit.c | 454 au_id_t auid; in audit_commit() local
537 auid = ar->k_ar.ar_subj_auid; in audit_commit()
556 if (audit_pipe_preselect(auid, event, class, sorf, in audit_commit()
613 au_id_t auid; in audit_syscall_enter() local
644 auid = cred->cr_audit.as_aia_p->ai_auid; in audit_syscall_enter()
645 if (auid == AU_DEFAUDITID) { in audit_syscall_enter()
686 } else if (audit_pipe_preselect(auid, event, class, AU_PRS_BOTH, 0)) { in audit_syscall_enter()
758 au_id_t auid; in audit_subcall_enter() local
766 auid = cred->cr_audit.as_aia_p->ai_auid; in audit_subcall_enter()
767 if (auid == AU_DEFAUDITID) { in audit_subcall_enter()
[all …]
|
| H A D | audit_pipe.c | 268 audit_pipe_preselect_find(struct audit_pipe *ap, au_id_t auid) in audit_pipe_preselect_find() argument
275 if (app->app_auid == auid) { in audit_pipe_preselect_find()
286 audit_pipe_preselect_get(struct audit_pipe *ap, au_id_t auid, in audit_pipe_preselect_get() argument
293 app = audit_pipe_preselect_find(ap, auid); in audit_pipe_preselect_get()
309 audit_pipe_preselect_set(struct audit_pipe *ap, au_id_t auid, au_mask_t mask) in audit_pipe_preselect_set() argument
319 app = audit_pipe_preselect_find(ap, auid); in audit_pipe_preselect_set()
323 app->app_auid = auid; in audit_pipe_preselect_set()
335 audit_pipe_preselect_delete(struct audit_pipe *ap, au_id_t auid) in audit_pipe_preselect_delete() argument
341 app = audit_pipe_preselect_find(ap, auid); in audit_pipe_preselect_delete()
388 audit_pipe_preselect_check(struct audit_pipe *ap, au_id_t auid, in audit_pipe_preselect_check() argument
[all …]
|
| H A D | audit_bsm_token.c | 628 au_to_process32(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid, gid_t rgid, in au_to_process32() argument
637 ADD_U_INT32(dptr, auid); in au_to_process32()
651 au_to_process64(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid, gid_t rgid, in au_to_process64() argument
661 ADD_U_INT32(dptr, auid); in au_to_process64()
675 au_to_process(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid, gid_t rgid, in au_to_process() argument
678 return au_to_process32(auid, euid, egid, ruid, rgid, pid, sid, in au_to_process()
697 au_to_process32_ex(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid, in au_to_process32_ex() argument
714 ADD_U_INT32(dptr, auid); in au_to_process32_ex()
733 au_to_process64_ex(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid, in au_to_process64_ex() argument
753 ADD_U_INT32(dptr, auid); in au_to_process64_ex()
[all …]
|
| H A D | audit_worker.c | 327 au_id_t auid; in audit_worker_process_record() local
368 auid = ar->k_ar.ar_subj_auid; in audit_worker_process_record()
399 audit_pipe_submit(auid, event, class, sorf, in audit_worker_process_record()
409 audit_sdev_submit(auid, ar->k_ar.ar_subj_asid, bsm->data, in audit_worker_process_record()
|
| H A D | audit_private.h | 458 int audit_pipe_preselect(au_id_t auid, au_event_t event,
460 void audit_pipe_submit(au_id_t auid, au_event_t event, au_class_t class,
|
| H A D | audit.h | 222 void audit_arg_auid(struct kaudit_record *ar, uid_t auid);
279 void audit_sdev_submit(au_id_t auid, au_asid_t asid, void *record,
|
| H A D | audit_syscalls.c | 1004 error = copyout((void *)&id, uap->auid, sizeof(id)); in getauid()
1021 error = copyin(uap->auid, &id, sizeof(id)); in setauid()
1025 AUDIT_ARG(auid, id); in setauid()
|
| H A D | audit_arg.c | 380 audit_arg_auid(struct kaudit_record *ar, uid_t auid) in audit_arg_auid() argument
382 ar->k_ar.ar_arg_auid = auid; in audit_arg_auid()
|
| H A D | audit_session.c | 1590 audit_sdev_submit(__unused au_id_t auid, __unused au_asid_t asid, void *record, in audit_sdev_submit() argument
|
| /xnu-8792.41.9/bsd/bsm/ |
| H A D | audit_record.h | 284 token_t *au_to_process(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid,
287 token_t *au_to_process32(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid,
290 token_t *au_to_process64(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid,
293 token_t *au_to_process_ex(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid,
296 token_t *au_to_process32_ex(au_id_t auid, uid_t euid, gid_t egid,
300 token_t *au_to_process64_ex(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid,
322 token_t *au_to_subject(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid,
325 token_t *au_to_subject32(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid,
328 token_t *au_to_subject64(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid,
331 token_t *au_to_subject_ex(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid,
[all …]
|
| /xnu-8792.41.9/security/ |
| H A D | mac_audit.c | 137 mac_proc_check_setauid(struct proc *curp, uid_t auid) in mac_proc_check_setauid() argument
153 MAC_CHECK(proc_check_setauid, cred, auid); in mac_proc_check_setauid()
385 mac_proc_check_setauid(__unused struct proc *curp, __unused uid_t auid) in mac_proc_check_setauid() argument
|
| H A D | mac_framework.h | 330 int mac_proc_check_setauid(proc_t proc, uid_t auid) __result_use_check;
|
| H A D | mac_policy.h | 2562 uid_t auid
|