Home
last modified time | relevance | path

Searched refs:k_ar (Results 1 – 7 of 7) sorted by relevance

/xnu-8792.41.9/bsd/security/audit/
H A Daudit_arg.c109 ar->k_ar.ar_arg_addr = addr; in audit_arg_addr()
124 ar->k_ar.ar_arg_exitstatus = status; in audit_arg_exit()
125 ar->k_ar.ar_arg_exitretval = retval; in audit_arg_exit()
132 ar->k_ar.ar_arg_len = len; in audit_arg_len()
139 ar->k_ar.ar_arg_fd2 = fd; in audit_arg_fd2()
146 ar->k_ar.ar_arg_fd = fd; in audit_arg_fd()
153 ar->k_ar.ar_arg_fflags = fflags; in audit_arg_fflags()
160 ar->k_ar.ar_arg_gid = gid; in audit_arg_gid()
167 ar->k_ar.ar_arg_uid = uid; in audit_arg_uid()
174 ar->k_ar.ar_arg_egid = egid; in audit_arg_egid()
[all …]
H A Daudit_mac.c82 ar->k_ar.ar_cred_mac_labels = zalloc_flags(audit_mac_label_zone, in audit_mac_new()
85 mac.m_string = ar->k_ar.ar_cred_mac_labels; in audit_mac_new()
87 zfree(audit_mac_label_zone, ar->k_ar.ar_cred_mac_labels); in audit_mac_new()
94 ar->k_ar.ar_mac_records = (struct mac_audit_record_list_t *) in audit_mac_new()
96 if (ar->k_ar.ar_mac_records == NULL) { in audit_mac_new()
97 zfree(audit_mac_label_zone, ar->k_ar.ar_cred_mac_labels); in audit_mac_new()
100 LIST_INIT(ar->k_ar.ar_mac_records); in audit_mac_new()
101 ar->k_ar.ar_forced_by_mac = 0; in audit_mac_new()
111 if (ar->k_ar.ar_vnode1_mac_labels != NULL) { in audit_mac_free()
112 zfree(audit_mac_label_zone, ar->k_ar.ar_vnode1_mac_labels); in audit_mac_free()
[all …]
H A Daudit.c233 ar->k_ar.ar_magic = AUDIT_RECORD_MAGIC; in audit_record_ctor()
234 nanotime(&ar->k_ar.ar_starttime); in audit_record_ctor()
242 cru2x(cred, &ar->k_ar.ar_subj_cred); in audit_record_ctor()
243 ar->k_ar.ar_subj_ruid = kauth_cred_getruid(cred); in audit_record_ctor()
244 ar->k_ar.ar_subj_rgid = kauth_cred_getrgid(cred); in audit_record_ctor()
245 ar->k_ar.ar_subj_egid = kauth_cred_getgid(cred); in audit_record_ctor()
246 ar->k_ar.ar_subj_pid = proc_getpid(p); in audit_record_ctor()
247 ar->k_ar.ar_subj_auid = cred->cr_audit.as_aia_p->ai_auid; in audit_record_ctor()
248 ar->k_ar.ar_subj_asid = cred->cr_audit.as_aia_p->ai_asid; in audit_record_ctor()
249 bcopy(&cred->cr_audit.as_mask, &ar->k_ar.ar_subj_amask, in audit_record_ctor()
[all …]
H A Daudit_worker.c115 .k_ar = {
368 auid = ar->k_ar.ar_subj_auid; in audit_worker_process_record()
369 event = ar->k_ar.ar_event; in audit_worker_process_record()
371 if (ar->k_ar.ar_errno == 0) { in audit_worker_process_record()
409 audit_sdev_submit(auid, ar->k_ar.ar_subj_asid, bsm->data, in audit_worker_process_record()
H A Daudit_private.h318 #define ARG_IS_VALID(kar, arg) ((kar)->k_ar.ar_valid_arg & (arg))
320 (kar)->k_ar.ar_valid_arg |= (arg); \
335 struct audit_record k_ar; member
H A Daudit_session.c613 ar->k_ar.ar_subj_ruid = 0; in audit_session_event()
614 ar->k_ar.ar_subj_rgid = 0; in audit_session_event()
615 ar->k_ar.ar_subj_egid = 0; in audit_session_event()
616 ar->k_ar.ar_subj_pid = 0; in audit_session_event()
617 ar->k_ar.ar_subj_auid = aia_p->ai_auid; in audit_session_event()
618 ar->k_ar.ar_subj_asid = aia_p->ai_asid; in audit_session_event()
619 bcopy(&aia_p->ai_termid, &ar->k_ar.ar_subj_term_addr, in audit_session_event()
623 ar->k_ar.ar_arg_amask.am_success = aia_p->ai_mask.am_success; in audit_session_event()
624 ar->k_ar.ar_arg_amask.am_failure = aia_p->ai_mask.am_failure; in audit_session_event()
628 ar->k_ar.ar_arg_value64 = aia_p->ai_flags; in audit_session_event()
H A Daudit_bsm.c542 struct audit_record *ar = &kar->k_ar; in audit_sys_fcntl()
623 ar = &kar->k_ar; in kaudit_to_bsm()