/xnu-2782.1.97/bsd/bsm/ |
H A D | audit_record.h | 236 token_t *au_to_process(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid, 238 token_t *au_to_process32(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid, 240 token_t *au_to_process64(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid, 242 token_t *au_to_process_ex(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid, 244 token_t *au_to_process32_ex(au_id_t auid, uid_t euid, gid_t egid, 247 token_t *au_to_process64_ex(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid, 259 token_t *au_to_subject(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid, 261 token_t *au_to_subject32(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid, 263 token_t *au_to_subject64(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid, 265 token_t *au_to_subject_ex(au_id_t auid, uid_ [all...] |
/xnu-2782.1.97/bsd/security/audit/ |
H A D | audit.c | 446 au_id_t auid; local 526 auid = ar->k_ar.ar_subj_auid; 544 if (audit_pipe_preselect(auid, event, class, sorf, 599 au_id_t auid; local 628 auid = cred->cr_audit.as_aia_p->ai_auid; 629 if (auid == AU_DEFAUDITID) 667 } else if (audit_pipe_preselect(auid, event, class, AU_PRS_BOTH, 0)) { 729 au_id_t auid; local 746 auid = cred->cr_audit.as_aia_p->ai_auid; 752 if (auid 804 au_id_t auid; local [all...] |
H A D | audit_pipe.c | 85 * and optionally expressing per-auid masks. The following data structure is 86 * the per-auid mask description. The global state is stored in the audit 90 * usage patterns for per-auid specifications are clear. 152 * interest specifications by auid. 266 * Find an audit pipe preselection specification for an auid, if any. 269 audit_pipe_preselect_find(struct audit_pipe *ap, au_id_t auid) argument 276 if (app->app_auid == auid) 283 * Query the per-pipe mask for a specific auid. 286 audit_pipe_preselect_get(struct audit_pipe *ap, au_id_t auid, argument 293 app = audit_pipe_preselect_find(ap, auid); 308 audit_pipe_preselect_set(struct audit_pipe *ap, au_id_t auid, au_mask_t mask) argument 335 audit_pipe_preselect_delete(struct audit_pipe *ap, au_id_t auid) argument 389 audit_pipe_preselect_check(struct audit_pipe *ap, au_id_t auid, au_event_t event, au_class_t class, int sorf, int trail_preselect) argument 426 audit_pipe_preselect(au_id_t auid, au_event_t event, au_class_t class, int sorf, int trail_preselect) argument 507 audit_pipe_submit(au_id_t auid, au_event_t event, au_class_t class, int sorf, int trail_select, void *record, u_int record_len) argument 761 au_id_t auid; local [all...] |
H A D | audit_bsm_token.c | 590 au_to_process32(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid, gid_t rgid, argument 599 ADD_U_INT32(dptr, auid); 613 au_to_process64(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid, gid_t rgid, argument 623 ADD_U_INT32(dptr, auid); 637 au_to_process(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid, gid_t rgid, argument 641 return (au_to_process32(auid, euid, egid, ruid, rgid, pid, sid, 660 au_to_process32_ex(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid, argument 676 ADD_U_INT32(dptr, auid); 694 au_to_process64_ex(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid, argument 713 ADD_U_INT32(dptr, auid); 733 au_to_process_ex(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid, gid_t rgid, pid_t pid, au_asid_t sid, au_tid_addr_t *tid) argument 961 au_to_subject32(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid, gid_t rgid, pid_t pid, au_asid_t sid, au_tid_t *tid) argument 984 au_to_subject64(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid, gid_t rgid, pid_t pid, au_asid_t sid, au_tid_t *tid) argument 1008 au_to_subject(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid, gid_t rgid, pid_t pid, au_asid_t sid, au_tid_t *tid) argument 1031 au_to_subject32_ex(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid, gid_t rgid, pid_t pid, au_asid_t sid, au_tid_addr_t *tid) argument 1065 au_to_subject64_ex(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid, gid_t rgid, pid_t pid, au_asid_t sid, au_tid_addr_t *tid) argument 1102 au_to_subject_ex(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid, gid_t rgid, pid_t pid, au_asid_t sid, au_tid_addr_t *tid) argument [all...] |
H A D | audit_worker.c | 321 au_id_t auid; local 359 auid = ar->k_ar.ar_subj_auid; 389 audit_pipe_submit(auid, event, class, sorf, 399 audit_sdev_submit(auid, ar->k_ar.ar_subj_asid, bsm->data,
|
H A D | audit.h | 217 void audit_arg_auid(struct kaudit_record *ar, uid_t auid); 269 void audit_sdev_submit(au_id_t auid, au_asid_t asid, void *record,
|
H A D | audit_private.h | 429 int audit_pipe_preselect(au_id_t auid, au_event_t event, 431 void audit_pipe_submit(au_id_t auid, au_event_t event, au_class_t class,
|
H A D | audit_syscalls.c | 756 error = copyout((void *)&id, uap->auid, sizeof(id)); 772 error = copyin(uap->auid, &id, sizeof(id)); 775 AUDIT_ARG(auid, id);
|
H A D | audit_arg.c | 393 audit_arg_auid(struct kaudit_record *ar, uid_t auid) argument 396 ar->k_ar.ar_arg_auid = auid;
|
H A D | audit_session.c | 586 * ruid, rgid, egid, pid, auid, asid, amask, and term_addr 1562 audit_sdev_submit(__unused au_id_t auid, __unused au_asid_t asid, void *record, argument 1583 if ((/* XXXss auid == asdev->asdev_auid && */
|
/xnu-2782.1.97/security/ |
H A D | mac_audit.c | 131 mac_proc_check_setauid(struct proc *curp, uid_t auid) argument 141 MAC_CHECK(proc_check_setauid, cred, auid); 356 mac_proc_check_setauid(__unused struct proc *curp, __unused uid_t auid) argument
|
H A D | mac_framework.h | 353 int mac_proc_check_setauid(proc_t proc, uid_t auid);
|
H A D | mac_policy.h | 2940 @param auid Audit user ID 2951 uid_t auid
|