Searched refs:audit (Results 1 - 25 of 71) sorted by relevance

123

/darwin-on-arm/xnu/bsd/bsm/
H A Daudit_kernel.h42 #warning "<bsm/audit_kernel.h> is deprecated. Please use <security/audit/audit.h> instead."
44 #include <security/audit/audit.h>
H A DMakefile23 audit.h audit_domain.h audit_errno.h audit_fcntl.h audit_internal.h \
26 audit.h
/darwin-on-arm/xnu/bsd/security/
H A DMakefile11 audit
20 audit
/darwin-on-arm/xnu/bsd/security/audit/
H A DMakefile33 INSTALL_MI_DIR = security/audit
37 EXPORT_MI_LIST = ${DATAFILES} audit.h audit_bsd.h audit_private.h
39 EXPORT_MI_DIR = security/audit
H A Daudit_bsm_socket_type.c34 #include <security/audit/audit.h>
H A Daudit_mac.c46 #include <bsm/audit.h>
50 #include <security/audit/audit.h>
51 #include <security/audit/audit_private.h>
80 /* Assume 3 MAC labels for each audit record: two for vnodes,
133 * Free the audit data from the MAC policies.
179 * suppressed. Other values at this point result in the audit record
197 * This function is called by the MAC Framework to add audit data
198 * from a policy to the current audit record.
217 * XXX: Note that we silently drop the audit dat
[all...]
H A Daudit_bsm_klib.c50 #include <bsm/audit.h>
52 #include <security/audit/audit.h>
53 #include <security/audit/audit_bsd.h>
54 #include <security/audit/audit_private.h>
58 * Hash table functions for the audit event number to event class mask
82 * Look up the class for an audit event in the class mapping table.
120 * audit kernel event mask. We use audit_kevent_mask to check to see
121 * if the audit syscalls flag needs to be set when preselection masks
472 /* We will audit
[all...]
H A Daudit_worker.c57 #include <bsm/audit.h>
61 #include <security/audit/audit.h>
62 #include <security/audit/audit_bsd.h>
63 #include <security/audit/audit_private.h>
88 * active audit trail. They are protected by audit_worker_sl, which will be
108 * The audit_q_draining flag is set when audit is disabled and the audit
114 * The special kernel audit record, audit_drain_kar, is used to mark the end of
125 * Write an audit recor
[all...]
H A Daudit_bsm_fcntl.c35 #include <security/audit/audit.h>
H A Daudit_bsd.c43 #include <bsm/audit.h>
46 #include <security/audit/audit_bsd.h>
47 #include <security/audit/audit.h>
48 #include <security/audit/audit_private.h>
63 * The lock group for the audit subsystem.
634 * Initialize lock group for audit related locks/mutexes.
642 ("audit_get_lck_grp: Could not allocate the audit lock group."));
656 printf("Cannot get audit control port\n");
H A Daudit_bsm_domain.c34 #include <security/audit/audit.h>
H A Daudit.c64 #include <bsm/audit.h>
68 #include <security/audit/audit.h>
69 #include <security/audit/audit_bsd.h>
70 #include <security/audit/audit_private.h>
97 * Define the audit control flags.
120 * Global audit statistics.
136 * Queue of audit records ready for delivery to disk. We insert new records
159 * Condition variable to signal when the worker is done draining the audit
181 * Kernel audit informatio
[all...]
H A Daudit_syscalls.c62 #include <bsm/audit.h>
65 #include <security/audit/audit.h>
66 #include <security/audit/audit_bsd.h>
67 #include <security/audit/audit_private.h>
140 * System call to allow a user space application to submit a BSM audit record
141 * to the kernel for inclusion in the audit log. This function does little
142 * verification on the audit record that is submitted.
146 * type submitted as part of the user audit data.
150 audit(proc_ function
975 audit(proc_t p, struct audit_args *uap, int32_t *retval) function
[all...]
/darwin-on-arm/xnu/security/
H A Dmac_iokit.c59 #include <bsd/bsm/audit.h>
60 #include <bsd/security/audit/audit.h>
H A Dmac_stub.c31 #include <security/audit/audit.h>
H A Dmac_audit.c70 #include <bsd/bsm/audit.h>
71 #include <bsd/security/audit/audit.h>
184 * arbitrary data to the current audit record.
185 * (Currently not supported, as no existing audit viewers would
206 * terminated ASCII text to the current audit record.
285 * If the audit was forced by a MAC policy by mac_audit_check_preselect(),
/darwin-on-arm/xnu/bsd/kern/
H A Dkern_xxx.c82 #include <security/audit/audit.h>
H A Dmakesyscalls.sh66 echo "usage: $0 input-file [<names|proto|header|table|audit> [<config-file>]]" 1>&2
88 audit)
295 printf "#include <bsm/audit.h>\n" > audittempfile
359 current_field = 4 # skip number, audit event, type
/darwin-on-arm/xnu/bsd/man/man4/
H A DMakefile12 audit.4 \
/darwin-on-arm/xnu/bsd/sys/
H A Ducred.h76 #include <bsm/audit.h>
/darwin-on-arm/xnu/libsyscall/wrappers/legacy/
H A Dgetaudit.c25 #include <bsm/audit.h>
/darwin-on-arm/xnu/tools/
H A Dcred_dump_backtraces.c17 #include <bsm/audit.h>
H A Dcred_dump_creds.c16 #include <bsm/audit.h>
/darwin-on-arm/xnu/bsd/conf/
H A Dfiles495 bsd/security/audit/audit.c optional config_audit
496 bsd/security/audit/audit_arg.c optional config_audit
497 bsd/security/audit/audit_bsd.c optional config_audit
498 bsd/security/audit/audit_bsm.c optional config_audit
499 bsd/security/audit/audit_bsm_errno.c optional config_audit
500 bsd/security/audit/audit_bsm_fcntl.c optional config_audit
501 bsd/security/audit/audit_bsm_domain.c optional config_audit
502 bsd/security/audit/audit_bsm_klib.c optional config_audit
503 bsd/security/audit/audit_bsm_socket_typ
[all...]
/darwin-on-arm/xnu/bsd/dev/arm/
H A Dunix_syscalls.c87 #include <security/audit/audit.h>

Completed in 123 milliseconds

123