Searched refs:k_ar (Results 1 - 7 of 7) sorted by relevance

/xnu-2782.1.97/bsd/security/audit/
H A Daudit_arg.c110 ar->k_ar.ar_arg_addr = addr;
125 ar->k_ar.ar_arg_exitstatus = status;
126 ar->k_ar.ar_arg_exitretval = retval;
134 ar->k_ar.ar_arg_len = len;
142 ar->k_ar.ar_arg_fd = fd;
150 ar->k_ar.ar_arg_fflags = fflags;
158 ar->k_ar.ar_arg_gid = gid;
166 ar->k_ar.ar_arg_uid = uid;
174 ar->k_ar.ar_arg_egid = egid;
182 ar->k_ar
[all...]
H A Daudit_mac.c94 ar->k_ar.ar_cred_mac_labels = (char *)zalloc(audit_mac_label_zone);
95 if (ar->k_ar.ar_cred_mac_labels == NULL)
98 mac.m_string = ar->k_ar.ar_cred_mac_labels;
104 ar->k_ar.ar_mac_records = (struct mac_audit_record_list_t *)
105 kalloc(sizeof(*ar->k_ar.ar_mac_records));
106 if (ar->k_ar.ar_mac_records == NULL) {
107 zfree(audit_mac_label_zone, ar->k_ar.ar_cred_mac_labels);
110 LIST_INIT(ar->k_ar.ar_mac_records);
111 ar->k_ar.ar_forced_by_mac = 0;
121 if (ar->k_ar
[all...]
H A Daudit.c230 ar->k_ar.ar_magic = AUDIT_RECORD_MAGIC;
231 nanotime(&ar->k_ar.ar_starttime);
239 cru2x(cred, &ar->k_ar.ar_subj_cred);
240 ar->k_ar.ar_subj_ruid = kauth_cred_getruid(cred);
241 ar->k_ar.ar_subj_rgid = kauth_cred_getrgid(cred);
242 ar->k_ar.ar_subj_egid = kauth_cred_getgid(cred);
243 ar->k_ar.ar_subj_pid = p->p_pid;
244 ar->k_ar.ar_subj_auid = cred->cr_audit.as_aia_p->ai_auid;
245 ar->k_ar.ar_subj_asid = cred->cr_audit.as_aia_p->ai_asid;
246 bcopy(&cred->cr_audit.as_mask, &ar->k_ar
[all...]
H A Daudit_worker.c117 .k_ar = {
359 auid = ar->k_ar.ar_subj_auid;
360 event = ar->k_ar.ar_event;
362 if (ar->k_ar.ar_errno == 0)
399 audit_sdev_submit(auid, ar->k_ar.ar_subj_asid, bsm->data,
H A Daudit_private.h294 #define ARG_IS_VALID(kar, arg) ((kar)->k_ar.ar_valid_arg & (arg))
296 (kar)->k_ar.ar_valid_arg |= (arg); \
311 struct audit_record k_ar; member in struct:kaudit_record
H A Daudit_session.c604 ar->k_ar.ar_subj_ruid = 0;
605 ar->k_ar.ar_subj_rgid = 0;
606 ar->k_ar.ar_subj_egid = 0;
607 ar->k_ar.ar_subj_pid = 0;
608 ar->k_ar.ar_subj_auid = aia_p->ai_auid;
609 ar->k_ar.ar_subj_asid = aia_p->ai_asid;
610 bcopy(&aia_p->ai_termid, &ar->k_ar.ar_subj_term_addr,
614 ar->k_ar.ar_arg_amask.am_success = aia_p->ai_mask.am_success;
615 ar->k_ar.ar_arg_amask.am_failure = aia_p->ai_mask.am_failure;
619 ar->k_ar
[all...]
H A Daudit_bsm.c521 struct audit_record *ar = &kar->k_ar;
602 ar = &kar->k_ar;

Completed in 162 milliseconds