Lines Matching refs:audit
50 #include <bsm/audit.h>
52 #include <security/audit/audit.h>
53 #include <security/audit/audit_bsd.h>
54 #include <security/audit/audit_private.h>
58 * Hash table functions for the audit event number to event class mask
82 * Look up the class for an audit event in the class mapping table.
120 * audit kernel event mask. We use audit_kevent_mask to check to see
121 * if the audit syscalls flag needs to be set when preselection masks
472 /* We will audit a bad command. */
516 /* We will audit a bad command. */
522 * Convert a command for the auditon() system call to a audit event.
592 * fcntl(F_UNLINKFROM,...) system calls to AUE_OPENAT_* and AUE_UNLINKAT audit