Searched refs:audit (Results 1 - 25 of 71) sorted by relevance
123
/darwin-on-arm/xnu/bsd/bsm/ |
H A D | audit_kernel.h | 42 #warning "<bsm/audit_kernel.h> is deprecated. Please use <security/audit/audit.h> instead." 44 #include <security/audit/audit.h>
|
H A D | Makefile | 23 audit.h audit_domain.h audit_errno.h audit_fcntl.h audit_internal.h \ 26 audit.h
|
/darwin-on-arm/xnu/bsd/security/ |
H A D | Makefile | 11 audit 20 audit
|
/darwin-on-arm/xnu/bsd/security/audit/ |
H A D | Makefile | 33 INSTALL_MI_DIR = security/audit 37 EXPORT_MI_LIST = ${DATAFILES} audit.h audit_bsd.h audit_private.h 39 EXPORT_MI_DIR = security/audit
|
H A D | audit_bsm_socket_type.c | 34 #include <security/audit/audit.h>
|
H A D | audit_mac.c | 46 #include <bsm/audit.h> 50 #include <security/audit/audit.h> 51 #include <security/audit/audit_private.h> 80 /* Assume 3 MAC labels for each audit record: two for vnodes, 133 * Free the audit data from the MAC policies. 179 * suppressed. Other values at this point result in the audit record 197 * This function is called by the MAC Framework to add audit data 198 * from a policy to the current audit record. 217 * XXX: Note that we silently drop the audit dat [all...] |
H A D | audit_bsm_klib.c | 50 #include <bsm/audit.h> 52 #include <security/audit/audit.h> 53 #include <security/audit/audit_bsd.h> 54 #include <security/audit/audit_private.h> 58 * Hash table functions for the audit event number to event class mask 82 * Look up the class for an audit event in the class mapping table. 120 * audit kernel event mask. We use audit_kevent_mask to check to see 121 * if the audit syscalls flag needs to be set when preselection masks 472 /* We will audit [all...] |
H A D | audit_worker.c | 57 #include <bsm/audit.h> 61 #include <security/audit/audit.h> 62 #include <security/audit/audit_bsd.h> 63 #include <security/audit/audit_private.h> 88 * active audit trail. They are protected by audit_worker_sl, which will be 108 * The audit_q_draining flag is set when audit is disabled and the audit 114 * The special kernel audit record, audit_drain_kar, is used to mark the end of 125 * Write an audit recor [all...] |
H A D | audit_bsm_fcntl.c | 35 #include <security/audit/audit.h>
|
H A D | audit_bsd.c | 43 #include <bsm/audit.h> 46 #include <security/audit/audit_bsd.h> 47 #include <security/audit/audit.h> 48 #include <security/audit/audit_private.h> 63 * The lock group for the audit subsystem. 634 * Initialize lock group for audit related locks/mutexes. 642 ("audit_get_lck_grp: Could not allocate the audit lock group.")); 656 printf("Cannot get audit control port\n");
|
H A D | audit_bsm_domain.c | 34 #include <security/audit/audit.h>
|
H A D | audit.c | 64 #include <bsm/audit.h> 68 #include <security/audit/audit.h> 69 #include <security/audit/audit_bsd.h> 70 #include <security/audit/audit_private.h> 97 * Define the audit control flags. 120 * Global audit statistics. 136 * Queue of audit records ready for delivery to disk. We insert new records 159 * Condition variable to signal when the worker is done draining the audit 181 * Kernel audit informatio [all...] |
H A D | audit_syscalls.c | 62 #include <bsm/audit.h> 65 #include <security/audit/audit.h> 66 #include <security/audit/audit_bsd.h> 67 #include <security/audit/audit_private.h> 140 * System call to allow a user space application to submit a BSM audit record 141 * to the kernel for inclusion in the audit log. This function does little 142 * verification on the audit record that is submitted. 146 * type submitted as part of the user audit data. 150 audit(proc_ function 975 audit(proc_t p, struct audit_args *uap, int32_t *retval) function [all...] |
/darwin-on-arm/xnu/security/ |
H A D | mac_iokit.c | 59 #include <bsd/bsm/audit.h> 60 #include <bsd/security/audit/audit.h>
|
H A D | mac_stub.c | 31 #include <security/audit/audit.h>
|
H A D | mac_audit.c | 70 #include <bsd/bsm/audit.h> 71 #include <bsd/security/audit/audit.h> 184 * arbitrary data to the current audit record. 185 * (Currently not supported, as no existing audit viewers would 206 * terminated ASCII text to the current audit record. 285 * If the audit was forced by a MAC policy by mac_audit_check_preselect(),
|
/darwin-on-arm/xnu/bsd/kern/ |
H A D | kern_xxx.c | 82 #include <security/audit/audit.h>
|
H A D | makesyscalls.sh | 66 echo "usage: $0 input-file [<names|proto|header|table|audit> [<config-file>]]" 1>&2 88 audit) 295 printf "#include <bsm/audit.h>\n" > audittempfile 359 current_field = 4 # skip number, audit event, type
|
/darwin-on-arm/xnu/bsd/man/man4/ |
H A D | Makefile | 12 audit.4 \
|
/darwin-on-arm/xnu/bsd/sys/ |
H A D | ucred.h | 76 #include <bsm/audit.h>
|
/darwin-on-arm/xnu/libsyscall/wrappers/legacy/ |
H A D | getaudit.c | 25 #include <bsm/audit.h>
|
/darwin-on-arm/xnu/tools/ |
H A D | cred_dump_backtraces.c | 17 #include <bsm/audit.h>
|
H A D | cred_dump_creds.c | 16 #include <bsm/audit.h>
|
/darwin-on-arm/xnu/bsd/conf/ |
H A D | files | 495 bsd/security/audit/audit.c optional config_audit 496 bsd/security/audit/audit_arg.c optional config_audit 497 bsd/security/audit/audit_bsd.c optional config_audit 498 bsd/security/audit/audit_bsm.c optional config_audit 499 bsd/security/audit/audit_bsm_errno.c optional config_audit 500 bsd/security/audit/audit_bsm_fcntl.c optional config_audit 501 bsd/security/audit/audit_bsm_domain.c optional config_audit 502 bsd/security/audit/audit_bsm_klib.c optional config_audit 503 bsd/security/audit/audit_bsm_socket_typ [all...] |
/darwin-on-arm/xnu/bsd/dev/arm/ |
H A D | unix_syscalls.c | 87 #include <security/audit/audit.h>
|
Completed in 61 milliseconds
123