1030 			struct audit_buffer *ab;  in audit_update_watch()  local
1031 			ab = audit_log_start(NULL, GFP_KERNEL,  in audit_update_watch()
1033 			audit_log_format(ab, "auid=%u ses=%u",  in audit_update_watch()
1036 			audit_log_format(ab,  in audit_update_watch()
1038 			audit_log_untrustedstring(ab, owatch->path);  in audit_update_watch()
1039 			audit_log_format(ab, " with dev=%u ino=%lu\n",  in audit_update_watch()
1041 			audit_log_format(ab, " list=%d res=1", r->listnr);  in audit_update_watch()
1042 			audit_log_end(ab);  in audit_update_watch()
1069 				struct audit_buffer *ab;  in audit_remove_parent_watches()  local
1070 				ab = audit_log_start(NULL, GFP_KERNEL,  in audit_remove_parent_watches()
1072 				audit_log_format(ab, "auid=%u ses=%u",  in audit_remove_parent_watches()
1075 				audit_log_format(ab, " op=remove rule path=");  in audit_remove_parent_watches()
1076 				audit_log_untrustedstring(ab, w->path);  in audit_remove_parent_watches()
1078 					audit_log_format(ab, " key=");  in audit_remove_parent_watches()
1079 					audit_log_untrustedstring(ab,  in audit_remove_parent_watches()
1082 					audit_log_format(ab, " key=(null)");  in audit_remove_parent_watches()
1083 				audit_log_format(ab, " list=%d res=1",  in audit_remove_parent_watches()
1085 				audit_log_end(ab);  in audit_remove_parent_watches()
1511 	struct audit_buffer *ab;  in audit_log_rule_change()  local
1516 	ab = audit_log_start(NULL, GFP_KERNEL, AUDIT_CONFIG_CHANGE);  in audit_log_rule_change()
1517 	if (!ab)  in audit_log_rule_change()
1519 	audit_log_format(ab, "auid=%u ses=%u", loginuid, sessionid);  in audit_log_rule_change()
1524 			audit_log_format(ab, " ssid=%u", sid);  in audit_log_rule_change()
1526 			audit_log_format(ab, " subj=%s", ctx);  in audit_log_rule_change()
1530 	audit_log_format(ab, " op=%s rule key=", action);  in audit_log_rule_change()
1532 		audit_log_untrustedstring(ab, rule->filterkey);  in audit_log_rule_change()
1534 		audit_log_format(ab, "(null)");  in audit_log_rule_change()
1535 	audit_log_format(ab, " list=%d res=%d", rule->listnr, res);  in audit_log_rule_change()
1536 	audit_log_end(ab);  in audit_log_rule_change()