Lines Matching refs:ar
326 audit_worker_process_record(struct kaudit_record *ar)
340 if (((ar->k_ar_commit & AR_COMMIT_USER) &&
341 (ar->k_ar_commit & AR_PRESELECT_USER_TRAIL)) ||
342 (ar->k_ar_commit & AR_PRESELECT_TRAIL)) {
352 if ((ar->k_ar_commit & AR_COMMIT_USER) &&
353 (ar->k_ar_commit & AR_PRESELECT_USER_TRAIL)) {
355 audit_record_write(audit_vp, audit_cred, ar->k_udata,
356 ar->k_ulen);
359 if ((ar->k_ar_commit & AR_COMMIT_USER) &&
360 (ar->k_ar_commit & AR_PRESELECT_USER_PIPE))
361 audit_pipe_submit_user(ar->k_udata, ar->k_ulen);
363 if (!(ar->k_ar_commit & AR_COMMIT_KERNEL) ||
364 ((ar->k_ar_commit & AR_PRESELECT_PIPE) == 0 &&
365 (ar->k_ar_commit & AR_PRESELECT_TRAIL) == 0))
368 auid = ar->k_ar.ar_subj_auid;
369 event = ar->k_ar.ar_event;
371 if (ar->k_ar.ar_errno == 0)
376 error = kaudit_to_bsm(ar, &bsm);
392 if (ar->k_ar_commit & AR_PRESELECT_TRAIL) {
397 if (ar->k_ar_commit & AR_PRESELECT_PIPE)
399 ar->k_ar_commit & AR_PRESELECT_TRAIL, bsm->data,
421 struct kaudit_record *ar;
443 while ((ar = TAILQ_FIRST(&audit_q))) {
444 TAILQ_REMOVE(&audit_q, ar, k_q);
448 TAILQ_INSERT_TAIL(&ar_worklist, ar, k_q);
454 while ((ar = TAILQ_FIRST(&ar_worklist))) {
455 TAILQ_REMOVE(&ar_worklist, ar, k_q);
456 audit_worker_process_record(ar);
457 audit_free(ar);