Lines Matching refs:ar
334 audit_worker_process_record(struct kaudit_record *ar)
348 if (((ar->k_ar_commit & AR_COMMIT_USER) &&
349 (ar->k_ar_commit & AR_PRESELECT_USER_TRAIL)) ||
350 (ar->k_ar_commit & AR_PRESELECT_TRAIL)) {
360 if ((ar->k_ar_commit & AR_COMMIT_USER) &&
361 (ar->k_ar_commit & AR_PRESELECT_USER_TRAIL)) {
363 audit_record_write(audit_vp, audit_cred, ar->k_udata,
364 ar->k_ulen);
367 if ((ar->k_ar_commit & AR_COMMIT_USER) &&
368 (ar->k_ar_commit & AR_PRESELECT_USER_PIPE))
369 audit_pipe_submit_user(ar->k_udata, ar->k_ulen);
371 if (!(ar->k_ar_commit & AR_COMMIT_KERNEL) ||
372 ((ar->k_ar_commit & AR_PRESELECT_PIPE) == 0 &&
373 (ar->k_ar_commit & AR_PRESELECT_TRAIL) == 0 &&
374 (ar->k_ar_commit & AR_PRESELECT_DTRACE) == 0))
377 auid = ar->k_ar.ar_subj_auid;
378 event = ar->k_ar.ar_event;
380 if (ar->k_ar.ar_errno == 0)
385 error = kaudit_to_bsm(ar, &bsm);
401 if (ar->k_ar_commit & AR_PRESELECT_TRAIL) {
406 if (ar->k_ar_commit & AR_PRESELECT_PIPE)
408 ar->k_ar_commit & AR_PRESELECT_TRAIL, bsm->data,
415 if (ar->k_ar_commit & AR_PRESELECT_DTRACE) {
417 dtaudit_hook_bsm(ar, auid, event, class, sorf,
441 struct kaudit_record *ar;
463 while ((ar = TAILQ_FIRST(&audit_q))) {
464 TAILQ_REMOVE(&audit_q, ar, k_q);
468 TAILQ_INSERT_TAIL(&ar_worklist, ar, k_q);
474 while ((ar = TAILQ_FIRST(&ar_worklist))) {
475 TAILQ_REMOVE(&ar_worklist, ar, k_q);
476 audit_worker_process_record(ar);
477 audit_free(ar);