Searched refs:k_ar (Results 1 - 7 of 7) sorted by relevance

/darwin-on-arm/xnu/bsd/security/audit/
H A Daudit_arg.c111 ar->k_ar.ar_arg_addr = addr;
126 ar->k_ar.ar_arg_exitstatus = status;
127 ar->k_ar.ar_arg_exitretval = retval;
135 ar->k_ar.ar_arg_len = len;
143 ar->k_ar.ar_arg_fd = fd;
151 ar->k_ar.ar_arg_fflags = fflags;
159 ar->k_ar.ar_arg_gid = gid;
167 ar->k_ar.ar_arg_uid = uid;
175 ar->k_ar.ar_arg_egid = egid;
183 ar->k_ar
[all...]
H A Daudit_mac.c95 ar->k_ar.ar_cred_mac_labels = (char *)zalloc(audit_mac_label_zone);
96 if (ar->k_ar.ar_cred_mac_labels == NULL)
99 mac.m_string = ar->k_ar.ar_cred_mac_labels;
105 ar->k_ar.ar_mac_records = (struct mac_audit_record_list_t *)
106 kalloc(sizeof(*ar->k_ar.ar_mac_records));
107 if (ar->k_ar.ar_mac_records == NULL) {
108 zfree(audit_mac_label_zone, ar->k_ar.ar_cred_mac_labels);
111 LIST_INIT(ar->k_ar.ar_mac_records);
112 ar->k_ar.ar_forced_by_mac = 0;
122 if (ar->k_ar
[all...]
H A Daudit.c231 ar->k_ar.ar_magic = AUDIT_RECORD_MAGIC;
232 nanotime(&ar->k_ar.ar_starttime);
240 cru2x(cred, &ar->k_ar.ar_subj_cred);
241 ar->k_ar.ar_subj_ruid = kauth_cred_getruid(cred);
242 ar->k_ar.ar_subj_rgid = kauth_cred_getrgid(cred);
243 ar->k_ar.ar_subj_egid = kauth_cred_getgid(cred);
244 ar->k_ar.ar_subj_pid = p->p_pid;
245 ar->k_ar.ar_subj_auid = cred->cr_audit.as_aia_p->ai_auid;
246 ar->k_ar.ar_subj_asid = cred->cr_audit.as_aia_p->ai_asid;
247 bcopy(&cred->cr_audit.as_mask, &ar->k_ar
[all...]
H A Daudit_worker.c118 .k_ar = {
360 auid = ar->k_ar.ar_subj_auid;
361 event = ar->k_ar.ar_event;
363 if (ar->k_ar.ar_errno == 0)
400 audit_sdev_submit(auid, ar->k_ar.ar_subj_asid, bsm->data,
H A Daudit_private.h294 #define ARG_IS_VALID(kar, arg) ((kar)->k_ar.ar_valid_arg & (arg))
296 (kar)->k_ar.ar_valid_arg |= (arg); \
311 struct audit_record k_ar; member in struct:kaudit_record
H A Daudit_session.c604 ar->k_ar.ar_subj_ruid = 0;
605 ar->k_ar.ar_subj_rgid = 0;
606 ar->k_ar.ar_subj_egid = 0;
607 ar->k_ar.ar_subj_pid = 0;
608 ar->k_ar.ar_subj_auid = aia_p->ai_auid;
609 ar->k_ar.ar_subj_asid = aia_p->ai_asid;
610 bcopy(&aia_p->ai_termid, &ar->k_ar.ar_subj_term_addr,
614 ar->k_ar.ar_arg_amask.am_success = aia_p->ai_mask.am_success;
615 ar->k_ar.ar_arg_amask.am_failure = aia_p->ai_mask.am_failure;
619 ar->k_ar
[all...]
H A Daudit_bsm.c523 struct audit_record *ar = &kar->k_ar;
604 ar = &kar->k_ar;

Completed in 31 milliseconds