Lines Matching refs:tok
105 kau_write(struct au_record *rec, struct au_token *tok)
108 KASSERT(tok != NULL, ("kau_write: tok == NULL"));
110 TAILQ_INSERT_TAIL(&rec->token_q, tok, tokens);
111 rec->len += tok->len;
173 struct au_token *tok;
176 while ((tok = TAILQ_FIRST(&rec->token_q))) {
177 TAILQ_REMOVE(&rec->token_q, tok, tokens);
178 free(tok->t_data, M_AUDITBSM);
179 free(tok, M_AUDITBSM);
192 * XXXAUDIT: These macros assume that 'kar', 'ar', 'rec', and 'tok' in the
197 tok = au_to_arg32(argnum, "at fd 1", ar->ar_arg_atfd1); \
198 kau_write(rec, tok); \
204 tok = au_to_arg32(argnum, "at fd 2", ar->ar_arg_atfd2); \
205 kau_write(rec, tok); \
211 tok = au_to_path(ar->ar_arg_upath1); \
212 kau_write(rec, tok); \
218 tok = au_to_path(ar->ar_arg_upath2); \
219 kau_write(rec, tok); \
225 tok = au_to_arg32(1, "at fd", ar->ar_arg_atfd); \
226 kau_write(rec, tok); \
229 tok = au_to_attr32(&ar->ar_arg_vnode1); \
230 kau_write(rec, tok); \
237 tok = au_to_attr32(&ar->ar_arg_vnode1); \
238 kau_write(rec, tok); \
244 tok = au_to_attr32(&ar->ar_arg_vnode2); \
245 kau_write(rec, tok); \
252 tok = au_to_arg32(1, "fd", ar->ar_arg_fd); \
253 kau_write(rec, tok); \
255 tok = au_to_attr32(&ar->ar_arg_vnode1); \
256 kau_write(rec, tok); \
259 tok = au_to_arg32(1, "non-file: fd", \
261 kau_write(rec, tok); \
269 tok = au_to_process32_ex(ar->ar_arg_auid, \
274 kau_write(rec, tok); \
276 tok = au_to_arg32(argn, "process", ar->ar_arg_pid); \
277 kau_write(rec, tok); \
285 tok = au_to_text(EXTATTR_NAMESPACE_USER_STRING);\
288 tok = au_to_text(EXTATTR_NAMESPACE_SYSTEM_STRING);\
291 tok = au_to_arg32((namespace_argnum), \
295 kau_write(rec, tok); \
299 tok = au_to_text(ar->ar_arg_text); \
300 kau_write(rec, tok); \
312 tok = au_to_arg32((argnum), (argname), \
315 tok = au_to_arg64((argnum), (argname), \
317 kau_write(rec, tok); \
329 struct au_token *tok;
331 tok = au_to_arg32(3, "length", ar->ar_arg_len);
332 kau_write(rec, tok);
336 tok = au_to_arg64(2, "policy",
338 kau_write(rec, tok);
344 tok = au_to_arg32(2, "policy", ar->ar_arg_auditon.au_policy);
345 kau_write(rec, tok);
349 tok = au_to_arg32(2, "setkmask:as_success",
351 kau_write(rec, tok);
352 tok = au_to_arg32(2, "setkmask:as_failure",
354 kau_write(rec, tok);
359 tok = au_to_arg64(2, "setqctrl:aq_hiwater",
361 kau_write(rec, tok);
362 tok = au_to_arg64(2, "setqctrl:aq_lowater",
364 kau_write(rec, tok);
365 tok = au_to_arg64(2, "setqctrl:aq_bufsz",
367 kau_write(rec, tok);
368 tok = au_to_arg64(2, "setqctrl:aq_delay",
370 kau_write(rec, tok);
371 tok = au_to_arg64(2, "setqctrl:aq_minfree",
373 kau_write(rec, tok);
379 tok = au_to_arg32(2, "setqctrl:aq_hiwater",
381 kau_write(rec, tok);
382 tok = au_to_arg32(2, "setqctrl:aq_lowater",
384 kau_write(rec, tok);
385 tok = au_to_arg32(2, "setqctrl:aq_bufsz",
387 kau_write(rec, tok);
388 tok = au_to_arg32(2, "setqctrl:aq_delay",
390 kau_write(rec, tok);
391 tok = au_to_arg32(2, "setqctrl:aq_minfree",
393 kau_write(rec, tok);
397 tok = au_to_arg32(2, "setumask:as_success",
399 kau_write(rec, tok);
400 tok = au_to_arg32(2, "setumask:as_failure",
402 kau_write(rec, tok);
406 tok = au_to_arg32(2, "setsmask:as_success",
408 kau_write(rec, tok);
409 tok = au_to_arg32(2, "setsmask:as_failure",
411 kau_write(rec, tok);
416 tok = au_to_arg64(2, "setcond",
418 kau_write(rec, tok);
424 tok = au_to_arg32(2, "setcond", ar->ar_arg_auditon.au_cond);
425 kau_write(rec, tok);
429 tok = au_to_arg32(2, "setclass:ec_event",
431 kau_write(rec, tok);
432 tok = au_to_arg32(2, "setclass:ec_class",
434 kau_write(rec, tok);
438 tok = au_to_arg32(2, "setpmask:as_success",
440 kau_write(rec, tok);
441 tok = au_to_arg32(2, "setpmask:as_failure",
443 kau_write(rec, tok);
447 tok = au_to_arg32(2, "setfsize:filesize",
449 kau_write(rec, tok);
470 struct au_token *tok, *subj_tok, *jail_tok;
534 tok = au_to_arg32(1, "fd", ar->ar_arg_fd);
535 kau_write(rec, tok);
538 tok = au_to_sock_inet((struct sockaddr_in *)
540 kau_write(rec, tok);
543 tok = au_to_sock_unix((struct sockaddr_un *)
545 kau_write(rec, tok);
563 tok = au_to_arg32(1, "fd", ar->ar_arg_fd);
564 kau_write(rec, tok);
567 tok = au_to_sock_inet((struct sockaddr_in *)
569 kau_write(rec, tok);
572 tok = au_to_sock_unix((struct sockaddr_un *)
574 kau_write(rec, tok);
584 tok = au_to_arg32(2, "fd", ar->ar_arg_fd);
585 kau_write(rec, tok);
588 tok = au_to_sock_unix((struct sockaddr_un *)
590 kau_write(rec, tok);
598 tok = au_to_sock_inet((struct sockaddr_in *)
600 kau_write(rec, tok);
603 tok = au_to_sock_unix((struct sockaddr_un *)
605 kau_write(rec, tok);
614 tok = au_to_arg32(1, "domain",
616 kau_write(rec, tok);
617 tok = au_to_arg32(2, "type",
619 kau_write(rec, tok);
620 tok = au_to_arg32(3, "protocol",
622 kau_write(rec, tok);
629 tok = au_to_arg32(1, "fd", ar->ar_arg_fd);
630 kau_write(rec, tok);
638 tok = au_to_arg32(1, "accounting off", 0);
639 kau_write(rec, tok);
645 tok = au_to_arg32(2, "setauid", ar->ar_arg_auid);
646 kau_write(rec, tok);
655 tok = au_to_arg32(1, "setaudit:auid",
657 kau_write(rec, tok);
658 tok = au_to_arg32(1, "setaudit:port",
660 kau_write(rec, tok);
661 tok = au_to_arg32(1, "setaudit:machine",
663 kau_write(rec, tok);
664 tok = au_to_arg32(1, "setaudit:as_success",
666 kau_write(rec, tok);
667 tok = au_to_arg32(1, "setaudit:as_failure",
669 kau_write(rec, tok);
670 tok = au_to_arg32(1, "setaudit:asid",
672 kau_write(rec, tok);
681 tok = au_to_arg32(1, "setaudit_addr:auid",
683 kau_write(rec, tok);
684 tok = au_to_arg32(1, "setaudit_addr:as_success",
686 kau_write(rec, tok);
687 tok = au_to_arg32(1, "setaudit_addr:as_failure",
689 kau_write(rec, tok);
690 tok = au_to_arg32(1, "setaudit_addr:asid",
692 kau_write(rec, tok);
693 tok = au_to_arg32(1, "setaudit_addr:type",
695 kau_write(rec, tok);
696 tok = au_to_arg32(1, "setaudit_addr:port",
698 kau_write(rec, tok);
700 tok = au_to_in_addr_ex((struct in6_addr *)
703 tok = au_to_in_addr((struct in_addr *)
705 kau_write(rec, tok);
714 tok = au_to_arg32(1, "cmd", ar->ar_arg_cmd);
715 kau_write(rec, tok);
745 tok = au_to_exit(ar->ar_arg_exitretval,
747 kau_write(rec, tok);
798 tok = au_to_arg32(1, "type", ar->ar_arg_value);
799 kau_write(rec, tok);
857 tok = au_to_arg32(2, "mode", ar->ar_arg_value);
858 kau_write(rec, tok);
872 tok = au_to_arg32(2, "flags", ar->ar_arg_fflags);
873 kau_write(rec, tok);
881 tok = au_to_arg32(2, "new file mode",
883 kau_write(rec, tok);
891 tok = au_to_arg32(3, "new file mode",
893 kau_write(rec, tok);
901 tok = au_to_arg32(2, "new file uid", ar->ar_arg_uid);
902 kau_write(rec, tok);
905 tok = au_to_arg32(3, "new file gid", ar->ar_arg_gid);
906 kau_write(rec, tok);
914 tok = au_to_arg32(3, "new file uid", ar->ar_arg_uid);
915 kau_write(rec, tok);
918 tok = au_to_arg32(4, "new file gid", ar->ar_arg_gid);
919 kau_write(rec, tok);
931 tok = au_to_arg32(1, "fd", ar->ar_arg_fd);
932 kau_write(rec, tok);
939 tok = au_to_arg32(1, "fd", ar->ar_arg_fd);
940 kau_write(rec, tok);
946 tok = au_to_arg32(1, "lowfd", ar->ar_arg_fd);
947 kau_write(rec, tok);
950 tok = au_to_arg32(2, "highfd", ar->ar_arg_cmd);
951 kau_write(rec, tok);
954 tok = au_to_arg32(3, "flags", ar->ar_arg_fflags);
955 kau_write(rec, tok);
961 tok = au_to_arg32(1, "signal", ar->ar_arg_signum);
962 kau_write(rec, tok);
970 tok = au_to_arg32(2, "cmd", ar->ar_arg_cmd);
971 kau_write(rec, tok);
996 tok = au_to_arg32(2, "fd", ar->ar_arg_fd);
997 kau_write(rec, tok);
1004 tok = au_to_arg32(1, "fd", ar->ar_arg_fd);
1005 kau_write(rec, tok);
1012 tok = au_to_exec_args(ar->ar_arg_argv,
1014 kau_write(rec, tok);
1017 tok = au_to_exec_env(ar->ar_arg_envv,
1019 kau_write(rec, tok);
1026 tok = au_to_arg32(2, "new file mode",
1028 kau_write(rec, tok);
1059 tok = au_to_arg32(2, "new file uid", ar->ar_arg_uid);
1060 kau_write(rec, tok);
1063 tok = au_to_arg32(3, "new file gid", ar->ar_arg_gid);
1064 kau_write(rec, tok);
1071 tok = au_to_arg32(2, "cmd",
1073 kau_write(rec, tok);
1080 tok = au_to_arg32(2, "flags", ar->ar_arg_fflags);
1081 kau_write(rec, tok);
1088 tok = au_to_arg32(2, "operation", ar->ar_arg_cmd);
1089 kau_write(rec, tok);
1096 tok = au_to_arg32(1, "flags", ar->ar_arg_fflags);
1097 kau_write(rec, tok);
1104 tok = au_to_arg32(0, "child PID", ar->ar_arg_pid);
1105 kau_write(rec, tok);
1111 tok = au_to_arg32(2, "cmd", ar->ar_arg_cmd);
1112 kau_write(rec, tok);
1118 tok = kau_to_socket(&ar->ar_arg_sockinfo);
1119 kau_write(rec, tok);
1122 tok = au_to_arg32(1, "fd",
1124 kau_write(rec, tok);
1133 tok = au_to_arg32(2, "signal", ar->ar_arg_signum);
1134 kau_write(rec, tok);
1141 tok = au_to_arg32(2, "ops", ar->ar_arg_cmd);
1142 kau_write(rec, tok);
1145 tok = au_to_arg32(3, "trpoints", ar->ar_arg_value);
1146 kau_write(rec, tok);
1173 tok = au_to_arg32(2, "mode", ar->ar_arg_mode);
1174 kau_write(rec, tok);
1183 tok = au_to_arg32(2, "mode", ar->ar_arg_mode);
1184 kau_write(rec, tok);
1187 tok = au_to_arg32(3, "dev", ar->ar_arg_dev);
1188 kau_write(rec, tok);
1201 tok = au_to_arg32(2, "len", ar->ar_arg_len);
1202 kau_write(rec, tok);
1208 tok = au_to_arg32(3, "protection",
1210 kau_write(rec, tok);
1215 tok = au_to_arg32(3, "inherit",
1217 kau_write(rec, tok);
1226 tok = au_to_arg32(3, "flags", ar->ar_arg_fflags);
1227 kau_write(rec, tok);
1230 tok = au_to_text(ar->ar_arg_text);
1231 kau_write(rec, tok);
1237 tok = au_to_arg32(1, "flags", ar->ar_arg_cmd);
1238 kau_write(rec, tok);
1244 tok = au_to_arg32(2, "flags", ar->ar_arg_value);
1245 kau_write(rec, tok);
1249 tok = au_to_text(ar->ar_arg_text);
1250 kau_write(rec, tok);
1260 tok = au_to_arg32(1, "msg ID", ar->ar_arg_svipc_id);
1261 kau_write(rec, tok);
1263 tok = au_to_ipc(AT_IPC_MSG, ar->ar_arg_svipc_id);
1264 kau_write(rec, tok);
1271 tok = au_to_ipc(AT_IPC_MSG,
1273 kau_write(rec, tok);
1290 tok = au_to_arg32(3, "mode", ar->ar_arg_mode);
1291 kau_write(rec, tok);
1302 tok = au_to_arg32(2, "flags", ar->ar_arg_fflags);
1303 kau_write(rec, tok);
1315 tok = au_to_arg32(3, "mode", ar->ar_arg_mode);
1316 kau_write(rec, tok);
1327 tok = au_to_arg32(2, "flags", ar->ar_arg_fflags);
1328 kau_write(rec, tok);
1336 tok = au_to_arg32(1, "fd", ar->ar_arg_fd);
1337 kau_write(rec, tok);
1340 tok = au_to_arg32(2, "signal", ar->ar_arg_signum);
1341 kau_write(rec, tok);
1347 tok = au_to_arg32(0, "child PID", ar->ar_arg_pid);
1348 kau_write(rec, tok);
1351 tok = au_to_arg32(2, "flags", ar->ar_arg_fflags);
1352 kau_write(rec, tok);
1355 tok = au_to_arg32(1, "fd", ar->ar_arg_fd);
1356 kau_write(rec, tok);
1361 tok = au_to_arg32(1, "fd", ar->ar_arg_fd);
1362 kau_write(rec, tok);
1368 tok = au_to_arg32(1, "idtype", ar->ar_arg_value);
1369 kau_write(rec, tok);
1372 tok = au_to_arg32(2, "com", ar->ar_arg_cmd);
1373 kau_write(rec, tok);
1380 tok = au_to_arg32(1, "request", ar->ar_arg_cmd);
1381 kau_write(rec, tok);
1384 tok = au_to_arg32(4, "data", ar->ar_arg_value);
1385 kau_write(rec, tok);
1392 tok = au_to_arg32(2, "command", ar->ar_arg_cmd);
1393 kau_write(rec, tok);
1396 tok = au_to_arg32(3, "uid", ar->ar_arg_uid);
1397 kau_write(rec, tok);
1400 tok = au_to_arg32(3, "gid", ar->ar_arg_gid);
1401 kau_write(rec, tok);
1408 tok = au_to_arg32(1, "howto", ar->ar_arg_cmd);
1409 kau_write(rec, tok);
1419 tok = au_to_arg32(1, "sem ID", ar->ar_arg_svipc_id);
1420 kau_write(rec, tok);
1422 tok = au_to_ipc(AT_IPC_SEM,
1424 kau_write(rec, tok);
1432 tok = au_to_ipc(AT_IPC_SEM,
1434 kau_write(rec, tok);
1441 tok = au_to_arg32(1, "egid", ar->ar_arg_egid);
1442 kau_write(rec, tok);
1448 tok = au_to_arg32(1, "euid", ar->ar_arg_euid);
1449 kau_write(rec, tok);
1455 tok = au_to_arg32(1, "rgid", ar->ar_arg_rgid);
1456 kau_write(rec, tok);
1459 tok = au_to_arg32(2, "egid", ar->ar_arg_egid);
1460 kau_write(rec, tok);
1466 tok = au_to_arg32(1, "ruid", ar->ar_arg_ruid);
1467 kau_write(rec, tok);
1470 tok = au_to_arg32(2, "euid", ar->ar_arg_euid);
1471 kau_write(rec, tok);
1477 tok = au_to_arg32(1, "rgid", ar->ar_arg_rgid);
1478 kau_write(rec, tok);
1481 tok = au_to_arg32(2, "egid", ar->ar_arg_egid);
1482 kau_write(rec, tok);
1485 tok = au_to_arg32(3, "sgid", ar->ar_arg_sgid);
1486 kau_write(rec, tok);
1492 tok = au_to_arg32(1, "ruid", ar->ar_arg_ruid);
1493 kau_write(rec, tok);
1496 tok = au_to_arg32(2, "euid", ar->ar_arg_euid);
1497 kau_write(rec, tok);
1500 tok = au_to_arg32(3, "suid", ar->ar_arg_suid);
1501 kau_write(rec, tok);
1507 tok = au_to_arg32(1, "gid", ar->ar_arg_gid);
1508 kau_write(rec, tok);
1514 tok = au_to_arg32(1, "uid", ar->ar_arg_uid);
1515 kau_write(rec, tok);
1523 tok = au_to_arg32(1, "setgroups",
1525 kau_write(rec, tok);
1532 tok = au_to_text(ar->ar_arg_login);
1533 kau_write(rec, tok);
1542 tok = au_to_arg32(1, "which", ar->ar_arg_cmd);
1543 kau_write(rec, tok);
1546 tok = au_to_arg32(2, "who", ar->ar_arg_uid);
1547 kau_write(rec, tok);
1551 tok = au_to_arg32(3, "priority", ar->ar_arg_value);
1552 kau_write(rec, tok);
1558 tok = au_to_arg32(1, "flag", ar->ar_arg_value);
1559 kau_write(rec, tok);
1566 tok = au_to_arg32(1, "shmid", ar->ar_arg_svipc_id);
1567 kau_write(rec, tok);
1569 tok = au_to_ipc(AT_IPC_SHM, ar->ar_arg_svipc_id);
1570 kau_write(rec, tok);
1573 tok = au_to_arg32(2, "shmaddr",
1575 kau_write(rec, tok);
1578 tok = au_to_ipc_perm(&ar->ar_arg_svipc_perm);
1579 kau_write(rec, tok);
1585 tok = au_to_arg32(1, "shmid", ar->ar_arg_svipc_id);
1586 kau_write(rec, tok);
1588 tok = au_to_ipc(AT_IPC_SHM, ar->ar_arg_svipc_id);
1589 kau_write(rec, tok);
1601 tok = au_to_ipc_perm(&ar->ar_arg_svipc_perm);
1602 kau_write(rec, tok);
1612 tok = au_to_arg32(1, "shmaddr",
1614 kau_write(rec, tok);
1621 tok = au_to_arg32(0, "shmid", ar->ar_arg_svipc_id);
1622 kau_write(rec, tok);
1623 tok = au_to_ipc(AT_IPC_SHM, ar->ar_arg_svipc_id);
1624 kau_write(rec, tok);
1627 tok = au_to_ipc_perm(&ar->ar_arg_svipc_perm);
1628 kau_write(rec, tok);
1637 tok = au_to_arg32(2, "flags", ar->ar_arg_fflags);
1638 kau_write(rec, tok);
1646 tok = au_to_arg32(2, "flags", ar->ar_arg_fflags);
1647 kau_write(rec, tok);
1650 tok = au_to_arg32(3, "mode", ar->ar_arg_mode);
1651 kau_write(rec, tok);
1667 tok = au_to_ipc_perm(&perm);
1668 kau_write(rec, tok);
1674 tok = au_to_arg32(2, "flags", ar->ar_arg_fflags);
1675 kau_write(rec, tok);
1678 tok = au_to_arg32(3, "mode", ar->ar_arg_mode);
1679 kau_write(rec, tok);
1682 tok = au_to_arg32(4, "value", ar->ar_arg_value);
1683 kau_write(rec, tok);
1689 tok = au_to_text(ar->ar_arg_text);
1690 kau_write(rec, tok);
1702 tok = au_to_ipc_perm(&perm);
1703 kau_write(rec, tok);
1709 tok = au_to_arg32(1, "sem", ar->ar_arg_fd);
1710 kau_write(rec, tok);
1717 tok = au_to_text(ar->ar_arg_text);
1718 kau_write(rec, tok);
1728 tok = au_to_arg32(1, "name",
1730 kau_write(rec, tok);
1734 tok = au_to_arg32(5, "newval", ar->ar_arg_value);
1735 kau_write(rec, tok);
1738 tok = au_to_text(ar->ar_arg_text);
1739 kau_write(rec, tok);
1745 tok = au_to_arg32(1, "new mask", ar->ar_arg_mask);
1746 kau_write(rec, tok);
1748 tok = au_to_arg32(0, "prev mask", ar->ar_retval);
1749 kau_write(rec, tok);
1756 tok = au_to_arg32(3, "options", ar->ar_arg_value);
1757 kau_write(rec, tok);
1767 tok = au_to_rights(&ar->ar_arg_rights);
1768 kau_write(rec, tok);
1777 tok = au_to_arg32(1, "fd", ar->ar_arg_fd);
1778 kau_write(rec, tok);
1785 tok = au_to_arg32(2, "fcntlrights",
1787 kau_write(rec, tok);
1818 tok = au_to_return32(au_errno_to_bsm(ar->ar_errno), ar->ar_retval);
1819 kau_write(rec, tok); /* Every record gets a return token */