Lines Matching refs:ar
316 audit_worker_process_record(struct kaudit_record *ar)
330 if (((ar->k_ar_commit & AR_COMMIT_USER) &&
331 (ar->k_ar_commit & AR_PRESELECT_USER_TRAIL)) ||
332 (ar->k_ar_commit & AR_PRESELECT_TRAIL)) {
342 if ((ar->k_ar_commit & AR_COMMIT_USER) &&
343 (ar->k_ar_commit & AR_PRESELECT_USER_TRAIL)) {
345 audit_record_write(audit_vp, &audit_ctx, ar->k_udata,
346 ar->k_ulen);
349 if ((ar->k_ar_commit & AR_COMMIT_USER) &&
350 (ar->k_ar_commit & AR_PRESELECT_USER_PIPE))
351 audit_pipe_submit_user(ar->k_udata, ar->k_ulen);
353 if (!(ar->k_ar_commit & AR_COMMIT_KERNEL) ||
354 ((ar->k_ar_commit & AR_PRESELECT_PIPE) == 0 &&
355 (ar->k_ar_commit & AR_PRESELECT_TRAIL) == 0 &&
356 (ar->k_ar_commit & AR_PRESELECT_FILTER) == 0))
359 auid = ar->k_ar.ar_subj_auid;
360 event = ar->k_ar.ar_event;
362 if (ar->k_ar.ar_errno == 0)
367 error = kaudit_to_bsm(ar, &bsm);
383 if (ar->k_ar_commit & AR_PRESELECT_TRAIL) {
388 if (ar->k_ar_commit & AR_PRESELECT_PIPE)
390 ar->k_ar_commit & AR_PRESELECT_TRAIL, bsm->data,
393 if (ar->k_ar_commit & AR_PRESELECT_FILTER) {
399 audit_sdev_submit(auid, ar->k_ar.ar_subj_asid, bsm->data,
422 struct kaudit_record *ar;
448 while ((ar = TAILQ_FIRST(&audit_q))) {
449 TAILQ_REMOVE(&audit_q, ar, k_q);
453 TAILQ_INSERT_TAIL(&ar_worklist, ar, k_q);
459 while ((ar = TAILQ_FIRST(&ar_worklist))) {
460 TAILQ_REMOVE(&ar_worklist, ar, k_q);
461 if (ar->k_ar_commit & AR_DRAIN_QUEUE) {
465 audit_worker_process_record(ar);
466 audit_free(ar);