| /darwin-on-arm/xnu/bsd/security/audit/ |
| H A D | audit_mac.c | 80 /* Assume 3 MAC labels for each audit record: two for vnodes,
178 * mac_audit_check_postselect returns MAC_AUDIT_NO, the record will be
179 * suppressed. Other values at this point result in the audit record
198 * from a policy to the current audit record.
203 struct mac_audit_record *record; local
221 record = kalloc(sizeof(*record));
222 if (record == NULL) {
227 record->type = type;
228 record
[all...] |
| H A D | audit_private.h | 95 * Success/failure conditions for the conversion of a kernel audit record to
103 * Defines for the kernel audit record k_ar_commit field. Flags are set to
104 * indicate what sort of record it is, and which preselection mechanism
194 /* Audit record header. */
290 * Arguments in the audit record are initially not defined; flags are set to
306 * In-kernel version of audit record; the basic record plus queue meta-data.
307 * This record can also have a pointer set to some opaque data that will be
338 * Kernel versions of the libbsm audit record functions.
428 int sorf, int trail_select, void *record, u_in
[all...] |
| H A D | audit_pipe.c | 118 * uiomove() is called to copy out the current head record's data
119 * while the record remains in the queue, so we prevent other threads
134 * first record in the queue. The number of bytes available for
160 * Current pending record list. Protected by a combination of ap_mtx
162 * remove a record from the head of the queue, as an in-progress read
189 * Global list of audit pipes, rwlock to protect it. Individual record
252 static u_int64_t audit_pipe_drops; /* Global record drop count. */
379 * Determine whether a specific audit pipe matches a record with these
422 * Determine whether there exists a pipe interested in a record with specific
451 * Append individual record t
456 audit_pipe_append(struct audit_pipe *ap, void *record, u_int record_len) argument
507 audit_pipe_submit(au_id_t auid, au_event_t event, au_class_t class, int sorf, int trail_select, void *record, u_int record_len) argument
541 audit_pipe_submit_user(void *record, u_int record_len) argument
[all...] |
| H A D | audit.h | 269 void audit_sdev_submit(au_id_t auid, au_asid_t asid, void *record,
340 * we have a audit record on the thread. Audit records can persist after
|
| H A D | audit_session.c | 230 * record's data whie the record remains in the queue, so we
249 * The amount read so far of the first record in the queue.
263 * Current pending record list. This is protected by a
265 * locks are required to remove a record from the head of the
303 * Individaul record queues are protected by per-sdev locks. These
357 static u_int64_t audit_sdev_drops; /* Global record drop count. */
401 * The per session record structure for the snapshot data.
530 * Walk the audit session hash table and build the record array.
585 * Create a new audit record
1517 audit_sdev_append(struct audit_sdev *asdev, void *record, u_int record_len) argument
1562 audit_sdev_submit(__unused au_id_t auid, __unused au_asid_t asid, void *record, u_int record_len) argument
[all...] |
| H A D | audit_syscalls.c | 140 * System call to allow a user space application to submit a BSM audit record
142 * verification on the audit record that is submitted.
171 * If there's no current audit record (audit() itself not audited)
172 * commit the user audit record.
181 * complete kernel audit record just so the user record can
195 error = copyin(uap->record, rec, uap->length);
205 /* Verify the record. */
212 * Attach the user audit record to the kernel audit record
[all...] |
| /darwin-on-arm/xnu/bsd/hfs/ |
| H A D | hfs_hotfiles.c | 522 FSBufferDescriptor record; local
595 record.bufferAddress = &data;
596 record.itemSize = sizeof(u_int32_t);
597 record.itemCount = 1;
670 error = BTInsertRecord(filefork, iterator, &record, record.itemSize);
677 /* Insert the corresponding thread record. */
683 error = BTInsertRecord(filefork, iterator, &record, record.itemSize);
939 * Update the data of a btree record
960 FSBufferDescriptor record; local
1076 FSBufferDescriptor record; local
1484 FSBufferDescriptor record; local
[all...] |
| H A D | hfs_vfsops.c | 1561 // record the current time at which we're mounting this volume
5026 int lockflags; /* Locks that reclaim and split code should grab before modifying the extent record */
5028 u_int32_t recStartBlock; /* File allocation block number (FABN) for current extent record */
5030 struct filefork *catalog_fp; /* If non-NULL, extent is from catalog record */
5031 union record { union in struct:hfs_reclaim_extent_info
5032 HFSPlusExtentRecord overflow;/* Extent record from overflow extents btree */
5033 HFSPlusAttrRecord xattr; /* Attribute record for large EAs */
5034 } record; member in struct:hfs_reclaim_extent_info
5035 HFSPlusExtentDescriptor *extents; /* Pointer to current extent record being processed.
5036 * For catalog extent record, point
[all...] |
| H A D | hfs_catalog.c | 233 * Convert a raw catalog key and record into an in-core catalog descriptor.
436 /* Turn thread record into a cnode key (in place). */
509 /* Turn thread record into a cnode key (in place) */
546 /* No corresponding file/folder record found for a thread record,
553 * the key in the thread matches the key in the record.
685 * The catalog record will change, and possibly its type.
741 /* Make sure that this non-hard link (regular) record is not
742 * an inode record that was looked up and we do not end up
937 * Insert the thread record firs
3725 struct HFSPlusCatalogFile record; local
[all...] |
| /darwin-on-arm/xnu/bsd/hfs/hfscommon/BTree/ |
| H A D | BTree.c | 64 checking if we had a record and could call BlockMove with an
66 <CS8> 10/24/97 msd In BTIterateRecord, when moving to the previous or next record
84 <HFS5> 1/13/97 djb Added support for getting current record to BTIterateRecord.
103 though we didn't have to add a record.
109 position routine does not find the record and we are looking for
110 the next record. In such a case, if the node's forrward link is
133 <12> 8/16/93 prp In BTSearchRecord, if the input hint found the node and record,
429 Routine: BTSearchRecord - Search BTree for a record with a matching key.
434 a result of the search. If a record exists at that position, and a BufferDescriptor
435 is supplied, the record wil
457 BTSearchRecord(FCB *filePtr, BTreeIterator *searchIterator, FSBufferDescriptor *record, u_int16_t *recordLen, BTreeIterator *resultIterator ) argument
649 BTIterateRecord(FCB *filePtr, BTreeIterationOperation operation, BTreeIterator *iterator, FSBufferDescriptor *record, u_int16_t *recordLen ) argument
1261 BTInsertRecord(FCB *filePtr, BTreeIterator *iterator, FSBufferDescriptor *record, u_int16_t recordLen ) argument
1424 BTReplaceRecord(FCB *filePtr, BTreeIterator *iterator, FSBufferDescriptor *record, u_int16_t recordLen ) argument
[all...] |
| H A D | BTreeMiscOps.c | 56 <CS2> 9/4/97 djb Optimize TrySimpleReplace for the case where record size is not
121 Routine: CalcKeyRecordSize - Return size of combined key/record structure.
127 recSize - length of record data
131 Result: u_int16_t - size of combined key/record that will be inserted in btree
147 Routine: VerifyHeader - Validate fields of the BTree header record.
149 Function: Examines the fields of the BTree header record to determine if the
381 if (((NodeDescPtr) middle->buffer)->bLink == 0) // before 1st btree record
442 if (((NodeDescPtr) middle->buffer)->fLink == 0) // beyond last record
526 FSBufferDescriptor *record,
536 if (record
524 CheckInsertParams(FCB *filePtr, BTreeIterator *iterator, FSBufferDescriptor *record, u_int16_t recordLen ) argument
577 TrySimpleReplace(BTreeControlBlockPtr btreePtr, NodeDescPtr nodePtr, BTreeIterator *iterator, FSBufferDescriptor *record, u_int16_t recordLen, Boolean *recordInserted ) argument
[all...] |
| /darwin-on-arm/xnu/iokit/Kernel/ |
| H A D | IOPMrootDomain.cpp | 241 AggressivesRecord record; member in union:AggressivesRequest::__anon740
1456 request->data.record.type = (uint32_t) type;
1457 request->data.record.value = (uint32_t) value;
1476 (entry->data.record.type == type) &&
1479 entry->data.record.value = value;
1541 (entry->data.record.type == type) &&
1544 value = entry->data.record.value;
1555 AggressivesRecord * record; local
1559 record = (AggressivesRecord *) aggressivesData->getBytesNoCopy();
1561 for (i = 0; i < count; i++, record
1644 AggressivesRecord * record; local
1810 const AggressivesRecord * record; local
1861 const AggressivesRecord * record; local
2112 recordPMEventGated(PMEventDetails *record) argument
2146 recordAndReleasePMEventGated(PMEventDetails *record) argument
[all...] |
| /darwin-on-arm/xnu/bsd/hfs/hfscommon/Misc/ |
| H A D | BTreeWrapper.c | 37 static Boolean ValidHFSRecord(const void *record, const BTreeControlBlock *btcb, u_int16_t recordSize);
71 DebugStr("ReplaceBTreeRecord: bad record?");
105 static Boolean ValidHFSRecord(const void *record, const BTreeControlBlock *btcb, u_int16_t recordSize) argument
117 else // Catalog record
119 const CatalogRecord *catalogRecord = (const CatalogRecord*) record;
267 return true; // record appears to be OK
|
| /darwin-on-arm/xnu/security/ |
| H A D | mac_audit.c | 83 mac_system_check_audit(struct ucred *cred, void *record, int length) argument
87 MAC_CHECK(system_check_audit, cred, record, length);
184 * arbitrary data to the current audit record.
206 * terminated ASCII text to the current audit record.
328 mac_system_check_audit(__unused struct ucred *cred, __unused void *record, __unused int length) argument
|
| H A D | mac_framework.h | 395 int mac_system_check_audit(kauth_cred_t cred, void *record, int length);
|
| H A D | mac_policy.h | 181 A return value of MAC_AUDIT_NO forces the audit record to be suppressed.
182 Any other return value results in the audit record being committed.
187 @return Return MAC_AUDIT_NO to force suppression of the audit record.
188 Any other value results in the audit record being committed.
207 returned. A return value of MAC_AUDIT_NO causes the audit record to
213 then create an audit record, else if any policy returns MAC_AUDIT_NO, then
214 suppress the creations of an audit record, else defer to the system's
443 inclusion in an audit record. An externalized label consists of a text
444 representation of the label contents that will be added to the audit record
3928 @param record Audi
[all...] |
| /darwin-on-arm/xnu/bsd/hfs/hfscommon/headers/ |
| H A D | BTreesPrivate.h | 156 // where is minimum record size enforced?
229 u_int32_t numValidHints; // Hint used to find correct record.
350 FSBufferDescriptor *record,
356 FSBufferDescriptor *record,
|
| H A D | BTreesInternal.h | 291 typedef int32_t (* IterateCallBackProcPtr)(BTreeKeyPtr key, void * record, void * state);
|