Lines Matching refs:auid
85 * and optionally expressing per-auid masks. The following data structure is
86 * the per-auid mask description. The global state is stored in the audit
90 * usage patterns for per-auid specifications are clear.
152 * interest specifications by auid.
266 * Find an audit pipe preselection specification for an auid, if any.
269 audit_pipe_preselect_find(struct audit_pipe *ap, au_id_t auid)
276 if (app->app_auid == auid)
283 * Query the per-pipe mask for a specific auid.
286 audit_pipe_preselect_get(struct audit_pipe *ap, au_id_t auid,
293 app = audit_pipe_preselect_find(ap, auid);
304 * Set the per-pipe mask for a specific auid. Add a new entry if needed;
308 audit_pipe_preselect_set(struct audit_pipe *ap, au_id_t auid, au_mask_t mask)
313 * Pessimistically assume that the auid doesn't already have a mask
318 app = audit_pipe_preselect_find(ap, auid);
322 app->app_auid = auid;
332 * Delete a per-auid mask on an audit pipe.
335 audit_pipe_preselect_delete(struct audit_pipe *ap, au_id_t auid)
341 app = audit_pipe_preselect_find(ap, auid);
354 * Delete all per-auid masks on an audit pipe.
384 * - If not, search for a specifically configured auid entry matching the
389 audit_pipe_preselect_check(struct audit_pipe *ap, au_id_t auid,
401 app = audit_pipe_preselect_find(ap, auid);
403 if (auid == (uid_t)AU_DEFAUDITID)
426 audit_pipe_preselect(au_id_t auid, au_event_t event, au_class_t class,
438 if (audit_pipe_preselect_check(ap, auid, event, class, sorf,
507 audit_pipe_submit(au_id_t auid, au_event_t event, au_class_t class, int sorf,
521 if (audit_pipe_preselect_check(ap, auid, event, class, sorf,
589 * Default flags, naflags, and auid-specific preselection settings to
761 au_id_t auid;
887 auid = *(au_id_t *)data;
888 error = audit_pipe_preselect_delete(ap, auid);