Lines Matching defs:tok
102 kau_write(struct au_record *rec, struct au_token *tok)
105 KASSERT(tok != NULL, ("kau_write: tok == NULL"));
107 TAILQ_INSERT_TAIL(&rec->token_q, tok, tokens);
108 rec->len += tok->len;
170 struct au_token *tok;
173 while ((tok = TAILQ_FIRST(&rec->token_q))) {
174 TAILQ_REMOVE(&rec->token_q, tok, tokens);
175 free(tok->t_data, M_AUDITBSM);
176 free(tok, M_AUDITBSM);
189 * XXXAUDIT: These macros assume that 'kar', 'ar', 'rec', and 'tok' in the
194 tok = au_to_arg32(argnum, "at fd 1", ar->ar_arg_atfd1); \
195 kau_write(rec, tok); \
201 tok = au_to_arg32(argnum, "at fd 2", ar->ar_arg_atfd2); \
202 kau_write(rec, tok); \
208 tok = au_to_path(ar->ar_arg_upath1); \
209 kau_write(rec, tok); \
215 tok = au_to_path(ar->ar_arg_upath2); \
216 kau_write(rec, tok); \
222 tok = au_to_arg32(1, "at fd", ar->ar_arg_atfd); \
223 kau_write(rec, tok); \
226 tok = au_to_attr32(&ar->ar_arg_vnode1); \
227 kau_write(rec, tok); \
234 tok = au_to_attr32(&ar->ar_arg_vnode1); \
235 kau_write(rec, tok); \
241 tok = au_to_attr32(&ar->ar_arg_vnode2); \
242 kau_write(rec, tok); \
249 tok = au_to_arg32(1, "fd", ar->ar_arg_fd); \
250 kau_write(rec, tok); \
252 tok = au_to_attr32(&ar->ar_arg_vnode1); \
253 kau_write(rec, tok); \
256 tok = au_to_arg32(1, "non-file: fd", \
258 kau_write(rec, tok); \
266 tok = au_to_process32_ex(ar->ar_arg_auid, \
271 kau_write(rec, tok); \
273 tok = au_to_arg32(argn, "process", ar->ar_arg_pid); \
274 kau_write(rec, tok); \
282 tok = au_to_text(EXTATTR_NAMESPACE_USER_STRING);\
285 tok = au_to_text(EXTATTR_NAMESPACE_SYSTEM_STRING);\
288 tok = au_to_arg32((namespace_argnum), \
292 kau_write(rec, tok); \
296 tok = au_to_text(ar->ar_arg_text); \
297 kau_write(rec, tok); \
309 tok = au_to_arg32((argnum), (argname), \
312 tok = au_to_arg64((argnum), (argname), \
314 kau_write(rec, tok); \
326 struct au_token *tok;
328 tok = au_to_arg32(3, "length", ar->ar_arg_len);
329 kau_write(rec, tok);
333 tok = au_to_arg64(2, "policy",
335 kau_write(rec, tok);
341 tok = au_to_arg32(2, "policy", ar->ar_arg_auditon.au_policy);
342 kau_write(rec, tok);
346 tok = au_to_arg32(2, "setkmask:as_success",
348 kau_write(rec, tok);
349 tok = au_to_arg32(2, "setkmask:as_failure",
351 kau_write(rec, tok);
356 tok = au_to_arg64(2, "setqctrl:aq_hiwater",
358 kau_write(rec, tok);
359 tok = au_to_arg64(2, "setqctrl:aq_lowater",
361 kau_write(rec, tok);
362 tok = au_to_arg64(2, "setqctrl:aq_bufsz",
364 kau_write(rec, tok);
365 tok = au_to_arg64(2, "setqctrl:aq_delay",
367 kau_write(rec, tok);
368 tok = au_to_arg64(2, "setqctrl:aq_minfree",
370 kau_write(rec, tok);
376 tok = au_to_arg32(2, "setqctrl:aq_hiwater",
378 kau_write(rec, tok);
379 tok = au_to_arg32(2, "setqctrl:aq_lowater",
381 kau_write(rec, tok);
382 tok = au_to_arg32(2, "setqctrl:aq_bufsz",
384 kau_write(rec, tok);
385 tok = au_to_arg32(2, "setqctrl:aq_delay",
387 kau_write(rec, tok);
388 tok = au_to_arg32(2, "setqctrl:aq_minfree",
390 kau_write(rec, tok);
394 tok = au_to_arg32(2, "setumask:as_success",
396 kau_write(rec, tok);
397 tok = au_to_arg32(2, "setumask:as_failure",
399 kau_write(rec, tok);
403 tok = au_to_arg32(2, "setsmask:as_success",
405 kau_write(rec, tok);
406 tok = au_to_arg32(2, "setsmask:as_failure",
408 kau_write(rec, tok);
413 tok = au_to_arg64(2, "setcond",
415 kau_write(rec, tok);
421 tok = au_to_arg32(2, "setcond", ar->ar_arg_auditon.au_cond);
422 kau_write(rec, tok);
426 tok = au_to_arg32(2, "setclass:ec_event",
428 kau_write(rec, tok);
429 tok = au_to_arg32(2, "setclass:ec_class",
431 kau_write(rec, tok);
435 tok = au_to_arg32(2, "setpmask:as_success",
437 kau_write(rec, tok);
438 tok = au_to_arg32(2, "setpmask:as_failure",
440 kau_write(rec, tok);
444 tok = au_to_arg32(2, "setfsize:filesize",
446 kau_write(rec, tok);
467 struct au_token *tok, *subj_tok, *jail_tok;
531 tok = au_to_arg32(1, "fd", ar->ar_arg_fd);
532 kau_write(rec, tok);
535 tok = au_to_sock_inet((struct sockaddr_in *)
537 kau_write(rec, tok);
540 tok = au_to_sock_unix((struct sockaddr_un *)
542 kau_write(rec, tok);
560 tok = au_to_arg32(1, "fd", ar->ar_arg_fd);
561 kau_write(rec, tok);
564 tok = au_to_sock_inet((struct sockaddr_in *)
566 kau_write(rec, tok);
569 tok = au_to_sock_unix((struct sockaddr_un *)
571 kau_write(rec, tok);
581 tok = au_to_arg32(2, "fd", ar->ar_arg_fd);
582 kau_write(rec, tok);
585 tok = au_to_sock_unix((struct sockaddr_un *)
587 kau_write(rec, tok);
595 tok = au_to_sock_inet((struct sockaddr_in *)
597 kau_write(rec, tok);
600 tok = au_to_sock_unix((struct sockaddr_un *)
602 kau_write(rec, tok);
611 tok = au_to_arg32(1, "domain",
613 kau_write(rec, tok);
614 tok = au_to_arg32(2, "type",
616 kau_write(rec, tok);
617 tok = au_to_arg32(3, "protocol",
619 kau_write(rec, tok);
626 tok = au_to_arg32(1, "fd", ar->ar_arg_fd);
627 kau_write(rec, tok);
635 tok = au_to_arg32(1, "accounting off", 0);
636 kau_write(rec, tok);
642 tok = au_to_arg32(2, "setauid", ar->ar_arg_auid);
643 kau_write(rec, tok);
652 tok = au_to_arg32(1, "setaudit:auid",
654 kau_write(rec, tok);
655 tok = au_to_arg32(1, "setaudit:port",
657 kau_write(rec, tok);
658 tok = au_to_arg32(1, "setaudit:machine",
660 kau_write(rec, tok);
661 tok = au_to_arg32(1, "setaudit:as_success",
663 kau_write(rec, tok);
664 tok = au_to_arg32(1, "setaudit:as_failure",
666 kau_write(rec, tok);
667 tok = au_to_arg32(1, "setaudit:asid",
669 kau_write(rec, tok);
678 tok = au_to_arg32(1, "setaudit_addr:auid",
680 kau_write(rec, tok);
681 tok = au_to_arg32(1, "setaudit_addr:as_success",
683 kau_write(rec, tok);
684 tok = au_to_arg32(1, "setaudit_addr:as_failure",
686 kau_write(rec, tok);
687 tok = au_to_arg32(1, "setaudit_addr:asid",
689 kau_write(rec, tok);
690 tok = au_to_arg32(1, "setaudit_addr:type",
692 kau_write(rec, tok);
693 tok = au_to_arg32(1, "setaudit_addr:port",
695 kau_write(rec, tok);
697 tok = au_to_in_addr_ex((struct in6_addr *)
700 tok = au_to_in_addr((struct in_addr *)
702 kau_write(rec, tok);
711 tok = au_to_arg32(1, "cmd", ar->ar_arg_cmd);
712 kau_write(rec, tok);
742 tok = au_to_exit(ar->ar_arg_exitretval,
744 kau_write(rec, tok);
795 tok = au_to_arg32(1, "type", ar->ar_arg_value);
796 kau_write(rec, tok);
854 tok = au_to_arg32(2, "mode", ar->ar_arg_value);
855 kau_write(rec, tok);
869 tok = au_to_arg32(2, "flags", ar->ar_arg_fflags);
870 kau_write(rec, tok);
878 tok = au_to_arg32(2, "new file mode",
880 kau_write(rec, tok);
888 tok = au_to_arg32(3, "new file mode",
890 kau_write(rec, tok);
898 tok = au_to_arg32(2, "new file uid", ar->ar_arg_uid);
899 kau_write(rec, tok);
902 tok = au_to_arg32(3, "new file gid", ar->ar_arg_gid);
903 kau_write(rec, tok);
911 tok = au_to_arg32(3, "new file uid", ar->ar_arg_uid);
912 kau_write(rec, tok);
915 tok = au_to_arg32(4, "new file gid", ar->ar_arg_gid);
916 kau_write(rec, tok);
928 tok = au_to_arg32(1, "fd", ar->ar_arg_fd);
929 kau_write(rec, tok);
936 tok = au_to_arg32(1, "fd", ar->ar_arg_fd);
937 kau_write(rec, tok);
943 tok = au_to_arg32(1, "lowfd", ar->ar_arg_fd);
944 kau_write(rec, tok);
947 tok = au_to_arg32(2, "highfd", ar->ar_arg_cmd);
948 kau_write(rec, tok);
951 tok = au_to_arg32(3, "flags", ar->ar_arg_fflags);
952 kau_write(rec, tok);
958 tok = au_to_arg32(1, "signal", ar->ar_arg_signum);
959 kau_write(rec, tok);
967 tok = au_to_arg32(2, "cmd", ar->ar_arg_cmd);
968 kau_write(rec, tok);
993 tok = au_to_arg32(2, "fd", ar->ar_arg_fd);
994 kau_write(rec, tok);
1001 tok = au_to_arg32(1, "fd", ar->ar_arg_fd);
1002 kau_write(rec, tok);
1009 tok = au_to_exec_args(ar->ar_arg_argv,
1011 kau_write(rec, tok);
1014 tok = au_to_exec_env(ar->ar_arg_envv,
1016 kau_write(rec, tok);
1023 tok = au_to_arg32(2, "new file mode",
1025 kau_write(rec, tok);
1056 tok = au_to_arg32(2, "new file uid", ar->ar_arg_uid);
1057 kau_write(rec, tok);
1060 tok = au_to_arg32(3, "new file gid", ar->ar_arg_gid);
1061 kau_write(rec, tok);
1068 tok = au_to_arg32(2, "cmd",
1070 kau_write(rec, tok);
1077 tok = au_to_arg32(2, "flags", ar->ar_arg_fflags);
1078 kau_write(rec, tok);
1085 tok = au_to_arg32(2, "operation", ar->ar_arg_cmd);
1086 kau_write(rec, tok);
1093 tok = au_to_arg32(2, "operation", ar->ar_arg_cmd);
1094 kau_write(rec, tok);
1097 tok = au_to_arg32(4, "flags", ar->ar_arg_fflags);
1098 kau_write(rec, tok);
1105 tok = au_to_arg32(1, "flags", ar->ar_arg_fflags);
1106 kau_write(rec, tok);
1113 tok = au_to_arg32(0, "child PID", ar->ar_arg_pid);
1114 kau_write(rec, tok);
1120 tok = au_to_arg32(2, "cmd", ar->ar_arg_cmd);
1121 kau_write(rec, tok);
1127 tok = kau_to_socket(&ar->ar_arg_sockinfo);
1128 kau_write(rec, tok);
1131 tok = au_to_arg32(1, "fd",
1133 kau_write(rec, tok);
1142 tok = au_to_arg32(2, "signal", ar->ar_arg_signum);
1143 kau_write(rec, tok);
1150 tok = au_to_arg32(2, "ops", ar->ar_arg_cmd);
1151 kau_write(rec, tok);
1154 tok = au_to_arg32(3, "trpoints", ar->ar_arg_value);
1155 kau_write(rec, tok);
1182 tok = au_to_arg32(2, "mode", ar->ar_arg_mode);
1183 kau_write(rec, tok);
1192 tok = au_to_arg32(2, "mode", ar->ar_arg_mode);
1193 kau_write(rec, tok);
1196 tok = au_to_arg32(3, "dev", ar->ar_arg_dev);
1197 kau_write(rec, tok);
1210 tok = au_to_arg32(2, "len", ar->ar_arg_len);
1211 kau_write(rec, tok);
1217 tok = au_to_arg32(3, "protection",
1219 kau_write(rec, tok);
1224 tok = au_to_arg32(3, "inherit",
1226 kau_write(rec, tok);
1235 tok = au_to_arg32(3, "flags", ar->ar_arg_fflags);
1236 kau_write(rec, tok);
1239 tok = au_to_text(ar->ar_arg_text);
1240 kau_write(rec, tok);
1246 tok = au_to_arg32(1, "flags", ar->ar_arg_cmd);
1247 kau_write(rec, tok);
1253 tok = au_to_arg32(2, "flags", ar->ar_arg_value);
1254 kau_write(rec, tok);
1258 tok = au_to_text(ar->ar_arg_text);
1259 kau_write(rec, tok);
1269 tok = au_to_arg32(1, "msg ID", ar->ar_arg_svipc_id);
1270 kau_write(rec, tok);
1272 tok = au_to_ipc(AT_IPC_MSG, ar->ar_arg_svipc_id);
1273 kau_write(rec, tok);
1280 tok = au_to_ipc(AT_IPC_MSG,
1282 kau_write(rec, tok);
1299 tok = au_to_arg32(3, "mode", ar->ar_arg_mode);
1300 kau_write(rec, tok);
1311 tok = au_to_arg32(2, "flags", ar->ar_arg_fflags);
1312 kau_write(rec, tok);
1324 tok = au_to_arg32(3, "mode", ar->ar_arg_mode);
1325 kau_write(rec, tok);
1336 tok = au_to_arg32(2, "flags", ar->ar_arg_fflags);
1337 kau_write(rec, tok);
1345 tok = au_to_arg32(1, "fd", ar->ar_arg_fd);
1346 kau_write(rec, tok);
1349 tok = au_to_arg32(2, "signal", ar->ar_arg_signum);
1350 kau_write(rec, tok);
1356 tok = au_to_arg32(0, "child PID", ar->ar_arg_pid);
1357 kau_write(rec, tok);
1360 tok = au_to_arg32(2, "flags", ar->ar_arg_fflags);
1361 kau_write(rec, tok);
1364 tok = au_to_arg32(1, "fd", ar->ar_arg_fd);
1365 kau_write(rec, tok);
1370 tok = au_to_arg32(1, "fd", ar->ar_arg_fd);
1371 kau_write(rec, tok);
1377 tok = au_to_arg32(1, "idtype", ar->ar_arg_value);
1378 kau_write(rec, tok);
1381 tok = au_to_arg32(2, "com", ar->ar_arg_cmd);
1382 kau_write(rec, tok);
1389 tok = au_to_arg32(1, "request", ar->ar_arg_cmd);
1390 kau_write(rec, tok);
1393 tok = au_to_arg32(4, "data", ar->ar_arg_value);
1394 kau_write(rec, tok);
1401 tok = au_to_arg32(2, "command", ar->ar_arg_cmd);
1402 kau_write(rec, tok);
1405 tok = au_to_arg32(3, "uid", ar->ar_arg_uid);
1406 kau_write(rec, tok);
1409 tok = au_to_arg32(3, "gid", ar->ar_arg_gid);
1410 kau_write(rec, tok);
1417 tok = au_to_arg32(1, "howto", ar->ar_arg_cmd);
1418 kau_write(rec, tok);
1428 tok = au_to_arg32(1, "sem ID", ar->ar_arg_svipc_id);
1429 kau_write(rec, tok);
1431 tok = au_to_ipc(AT_IPC_SEM,
1433 kau_write(rec, tok);
1441 tok = au_to_ipc(AT_IPC_SEM,
1443 kau_write(rec, tok);
1450 tok = au_to_arg32(1, "egid", ar->ar_arg_egid);
1451 kau_write(rec, tok);
1457 tok = au_to_arg32(1, "euid", ar->ar_arg_euid);
1458 kau_write(rec, tok);
1464 tok = au_to_arg32(1, "rgid", ar->ar_arg_rgid);
1465 kau_write(rec, tok);
1468 tok = au_to_arg32(2, "egid", ar->ar_arg_egid);
1469 kau_write(rec, tok);
1475 tok = au_to_arg32(1, "ruid", ar->ar_arg_ruid);
1476 kau_write(rec, tok);
1479 tok = au_to_arg32(2, "euid", ar->ar_arg_euid);
1480 kau_write(rec, tok);
1486 tok = au_to_arg32(1, "rgid", ar->ar_arg_rgid);
1487 kau_write(rec, tok);
1490 tok = au_to_arg32(2, "egid", ar->ar_arg_egid);
1491 kau_write(rec, tok);
1494 tok = au_to_arg32(3, "sgid", ar->ar_arg_sgid);
1495 kau_write(rec, tok);
1501 tok = au_to_arg32(1, "ruid", ar->ar_arg_ruid);
1502 kau_write(rec, tok);
1505 tok = au_to_arg32(2, "euid", ar->ar_arg_euid);
1506 kau_write(rec, tok);
1509 tok = au_to_arg32(3, "suid", ar->ar_arg_suid);
1510 kau_write(rec, tok);
1516 tok = au_to_arg32(1, "gid", ar->ar_arg_gid);
1517 kau_write(rec, tok);
1523 tok = au_to_arg32(1, "uid", ar->ar_arg_uid);
1524 kau_write(rec, tok);
1532 tok = au_to_arg32(1, "setgroups",
1534 kau_write(rec, tok);
1541 tok = au_to_text(ar->ar_arg_login);
1542 kau_write(rec, tok);
1551 tok = au_to_arg32(1, "which", ar->ar_arg_cmd);
1552 kau_write(rec, tok);
1555 tok = au_to_arg32(2, "who", ar->ar_arg_uid);
1556 kau_write(rec, tok);
1560 tok = au_to_arg32(3, "priority", ar->ar_arg_value);
1561 kau_write(rec, tok);
1567 tok = au_to_arg32(1, "flag", ar->ar_arg_value);
1568 kau_write(rec, tok);
1575 tok = au_to_arg32(1, "shmid", ar->ar_arg_svipc_id);
1576 kau_write(rec, tok);
1578 tok = au_to_ipc(AT_IPC_SHM, ar->ar_arg_svipc_id);
1579 kau_write(rec, tok);
1582 tok = au_to_arg32(2, "shmaddr",
1584 kau_write(rec, tok);
1587 tok = au_to_ipc_perm(&ar->ar_arg_svipc_perm);
1588 kau_write(rec, tok);
1594 tok = au_to_arg32(1, "shmid", ar->ar_arg_svipc_id);
1595 kau_write(rec, tok);
1597 tok = au_to_ipc(AT_IPC_SHM, ar->ar_arg_svipc_id);
1598 kau_write(rec, tok);
1610 tok = au_to_ipc_perm(&ar->ar_arg_svipc_perm);
1611 kau_write(rec, tok);
1621 tok = au_to_arg32(1, "shmaddr",
1623 kau_write(rec, tok);
1630 tok = au_to_arg32(0, "shmid", ar->ar_arg_svipc_id);
1631 kau_write(rec, tok);
1632 tok = au_to_ipc(AT_IPC_SHM, ar->ar_arg_svipc_id);
1633 kau_write(rec, tok);
1636 tok = au_to_ipc_perm(&ar->ar_arg_svipc_perm);
1637 kau_write(rec, tok);
1646 tok = au_to_arg32(2, "flags", ar->ar_arg_fflags);
1647 kau_write(rec, tok);
1655 tok = au_to_arg32(2, "flags", ar->ar_arg_fflags);
1656 kau_write(rec, tok);
1659 tok = au_to_arg32(3, "mode", ar->ar_arg_mode);
1660 kau_write(rec, tok);
1676 tok = au_to_ipc_perm(&perm);
1677 kau_write(rec, tok);
1683 tok = au_to_arg32(2, "flags", ar->ar_arg_fflags);
1684 kau_write(rec, tok);
1687 tok = au_to_arg32(3, "mode", ar->ar_arg_mode);
1688 kau_write(rec, tok);
1691 tok = au_to_arg32(4, "value", ar->ar_arg_value);
1692 kau_write(rec, tok);
1698 tok = au_to_text(ar->ar_arg_text);
1699 kau_write(rec, tok);
1711 tok = au_to_ipc_perm(&perm);
1712 kau_write(rec, tok);
1718 tok = au_to_arg32(1, "sem", ar->ar_arg_fd);
1719 kau_write(rec, tok);
1726 tok = au_to_text(ar->ar_arg_text);
1727 kau_write(rec, tok);
1737 tok = au_to_arg32(1, "name",
1739 kau_write(rec, tok);
1743 tok = au_to_arg32(5, "newval", ar->ar_arg_value);
1744 kau_write(rec, tok);
1747 tok = au_to_text(ar->ar_arg_text);
1748 kau_write(rec, tok);
1754 tok = au_to_arg32(1, "new mask", ar->ar_arg_mask);
1755 kau_write(rec, tok);
1757 tok = au_to_arg32(0, "prev mask", ar->ar_retval);
1758 kau_write(rec, tok);
1765 tok = au_to_arg32(3, "options", ar->ar_arg_value);
1766 kau_write(rec, tok);
1776 tok = au_to_rights(&ar->ar_arg_rights);
1777 kau_write(rec, tok);
1786 tok = au_to_arg32(1, "fd", ar->ar_arg_fd);
1787 kau_write(rec, tok);
1794 tok = au_to_arg32(2, "fcntlrights",
1796 kau_write(rec, tok);
1827 tok = au_to_return32(au_errno_to_bsm(ar->ar_errno), ar->ar_retval);
1828 kau_write(rec, tok); /* Every record gets a return token */