Home
last modified time | relevance | path

Searched refs:kaudit_record (Results 1 – 11 of 11) sorted by relevance

/xnu-8019.80.24/bsd/security/audit/
H A Daudit.h191 void audit_arg_addr(struct kaudit_record *ar, user_addr_t addr);
192 void audit_arg_exit(struct kaudit_record *ar, int status, int retval);
193 void audit_arg_len(struct kaudit_record *ar, user_size_t len);
194 void audit_arg_fd(struct kaudit_record *ar, int fd);
195 void audit_arg_fd2(struct kaudit_record *ar, int fd);
196 void audit_arg_fflags(struct kaudit_record *ar, int fflags);
197 void audit_arg_gid(struct kaudit_record *ar, gid_t gid);
198 void audit_arg_uid(struct kaudit_record *ar, uid_t uid);
199 void audit_arg_egid(struct kaudit_record *ar, gid_t egid);
200 void audit_arg_euid(struct kaudit_record *ar, uid_t euid);
[all …]
H A Daudit_arg.c105 audit_arg_addr(struct kaudit_record *ar, user_addr_t addr) in audit_arg_addr()
122 audit_arg_exit(struct kaudit_record *ar, int status, int retval) in audit_arg_exit()
130 audit_arg_len(struct kaudit_record *ar, user_size_t len) in audit_arg_len()
137 audit_arg_fd2(struct kaudit_record *ar, int fd) in audit_arg_fd2()
144 audit_arg_fd(struct kaudit_record *ar, int fd) in audit_arg_fd()
151 audit_arg_fflags(struct kaudit_record *ar, int fflags) in audit_arg_fflags()
158 audit_arg_gid(struct kaudit_record *ar, gid_t gid) in audit_arg_gid()
165 audit_arg_uid(struct kaudit_record *ar, uid_t uid) in audit_arg_uid()
172 audit_arg_egid(struct kaudit_record *ar, gid_t egid) in audit_arg_egid()
179 audit_arg_euid(struct kaudit_record *ar, uid_t euid) in audit_arg_euid()
[all …]
H A Daudit_private.h334 struct kaudit_record { struct
340 TAILQ_ENTRY(kaudit_record) k_q; argument
342 TAILQ_HEAD(kaudit_queue, kaudit_record);
348 void audit_abort(struct kaudit_record *ar);
349 void audit_commit(struct kaudit_record *ar, int error,
351 struct kaudit_record *audit_new(int event, proc_t p, struct uthread *td);
358 int kaudit_to_bsm(struct kaudit_record *kar, struct au_record **pau);
443 struct kaudit_record *currecord(void);
444 void audit_free(struct kaudit_record *ar);
467 int audit_mac_new(proc_t p, struct kaudit_record *ar);
[all …]
H A Daudit_mac.c75 audit_mac_new(proc_t p, struct kaudit_record *ar) in audit_mac_new()
107 audit_mac_free(struct kaudit_record *ar) in audit_mac_free()
198 struct kaudit_record *cur; in audit_mac_data()
228 audit_arg_mac_string(struct kaudit_record *ar, char *string) in audit_arg_mac_string()
H A Daudit.c182 sizeof(struct kaudit_record), ZC_NONE);
228 audit_record_ctor(proc_t p, struct kaudit_record *ar) in audit_record_ctor()
258 audit_record_dtor(struct kaudit_record *ar) in audit_record_dtor()
367 struct kaudit_record *
381 struct kaudit_record *
384 struct kaudit_record *ar; in audit_new()
438 audit_free(struct kaudit_record *ar) in audit_free()
450 audit_commit(struct kaudit_record *ar, int error, int retval) in audit_commit()
905 struct kaudit_record *ar; in audit_proc_coredump()
H A Daudit_worker.c114 static struct kaudit_record audit_drain_kar = {
322 audit_worker_process_record(struct kaudit_record *ar) in audit_worker_process_record()
434 struct kaudit_record *ar; in audit_worker()
H A Daudit_bsm.c68 static void audit_sys_fcntl(struct kaudit_record *kar,
539 audit_sys_fcntl(struct kaudit_record *kar, struct au_record *rec) in audit_sys_fcntl()
610 kaudit_to_bsm(struct kaudit_record *kar, struct au_record **pau) in kaudit_to_bsm()
H A Daudit_syscalls.c152 struct kaudit_record *ar = NULL; in audit()
H A Daudit_session.c582 struct kaudit_record *ar; in audit_session_event()
/xnu-8019.80.24/bsd/sys/
H A Duser.h214 struct kaudit_record *uu_ar; /* audit record */
/xnu-8019.80.24/bsd/kern/
H A Dkern_exec.c3585 struct kaudit_record *save_uu_ar = uthread->uu_ar; in posix_spawn()
3606 struct kaudit_record *save_uu_ar = uthread->uu_ar; in posix_spawn()