Lines Matching refs:ab
978 struct audit_buffer *ab; in audit_log_pid_context() local
983 ab = audit_log_start(context, GFP_KERNEL, AUDIT_OBJ_PID); in audit_log_pid_context()
984 if (!ab) in audit_log_pid_context()
987 audit_log_format(ab, "opid=%d oauid=%d ouid=%d oses=%d", pid, in audit_log_pid_context()
992 audit_log_format(ab, " obj=(none)"); in audit_log_pid_context()
995 audit_log_format(ab, " obj=%s", ctx); in audit_log_pid_context()
999 audit_log_format(ab, " ocomm="); in audit_log_pid_context()
1000 audit_log_untrustedstring(ab, comm); in audit_log_pid_context()
1001 audit_log_end(ab); in audit_log_pid_context()
1007 struct audit_buffer **ab, in audit_log_execve_info() argument
1049 audit_log_format(*ab, "argc=%d", axi->argc); in audit_log_execve_info()
1120 audit_log_end(*ab); in audit_log_execve_info()
1121 *ab = audit_log_start(context, in audit_log_execve_info()
1123 if (!*ab) in audit_log_execve_info()
1148 audit_log_format(*ab, "%s", abuf); in audit_log_execve_info()
1154 audit_log_n_hex(*ab, buf, len_tmp); in audit_log_execve_info()
1160 audit_log_n_string(*ab, buf, len_tmp); in audit_log_execve_info()
1188 struct audit_buffer *ab; in show_special() local
1191 ab = audit_log_start(context, GFP_KERNEL, context->type); in show_special()
1192 if (!ab) in show_special()
1198 audit_log_format(ab, "nargs=%d", nargs); in show_special()
1200 audit_log_format(ab, " a%d=%lx", i, in show_special()
1206 audit_log_format(ab, "ouid=%u ogid=%u mode=%#ho", in show_special()
1214 audit_log_format(ab, " osid=%u", osid); in show_special()
1217 audit_log_format(ab, " obj=%s", ctx); in show_special()
1222 audit_log_end(ab); in show_special()
1223 ab = audit_log_start(context, GFP_KERNEL, in show_special()
1225 if (unlikely(!ab)) in show_special()
1227 audit_log_format(ab, in show_special()
1236 audit_log_format(ab, in show_special()
1246 audit_log_format(ab, in show_special()
1256 audit_log_format(ab, "mqdes=%d sigev_signo=%d", in show_special()
1262 audit_log_format(ab, in show_special()
1270 audit_log_format(ab, "pid=%d", context->capset.pid); in show_special()
1271 audit_log_cap(ab, "cap_pi", &context->capset.cap.inheritable); in show_special()
1272 audit_log_cap(ab, "cap_pp", &context->capset.cap.permitted); in show_special()
1273 audit_log_cap(ab, "cap_pe", &context->capset.cap.effective); in show_special()
1276 audit_log_format(ab, "fd=%d flags=0x%x", context->mmap.fd, in show_special()
1280 audit_log_end(ab); in show_special()
1286 struct audit_buffer *ab; in audit_log_exit() local
1293 ab = audit_log_start(context, GFP_KERNEL, AUDIT_SYSCALL); in audit_log_exit()
1294 if (!ab) in audit_log_exit()
1296 audit_log_format(ab, "arch=%x syscall=%d", in audit_log_exit()
1299 audit_log_format(ab, " per=%lx", context->personality); in audit_log_exit()
1301 audit_log_format(ab, " success=%s exit=%ld", in audit_log_exit()
1305 audit_log_format(ab, in audit_log_exit()
1313 audit_log_task_info(ab, tsk); in audit_log_exit()
1314 audit_log_key(ab, context->filterkey); in audit_log_exit()
1315 audit_log_end(ab); in audit_log_exit()
1319 ab = audit_log_start(context, GFP_KERNEL, aux->type); in audit_log_exit()
1320 if (!ab) in audit_log_exit()
1327 audit_log_execve_info(context, &ab, axi); in audit_log_exit()
1332 audit_log_format(ab, "fver=%x", axs->fcap_ver); in audit_log_exit()
1333 audit_log_cap(ab, "fp", &axs->fcap.permitted); in audit_log_exit()
1334 audit_log_cap(ab, "fi", &axs->fcap.inheritable); in audit_log_exit()
1335 audit_log_format(ab, " fe=%d", axs->fcap.fE); in audit_log_exit()
1336 audit_log_cap(ab, "old_pp", &axs->old_pcap.permitted); in audit_log_exit()
1337 audit_log_cap(ab, "old_pi", &axs->old_pcap.inheritable); in audit_log_exit()
1338 audit_log_cap(ab, "old_pe", &axs->old_pcap.effective); in audit_log_exit()
1339 audit_log_cap(ab, "new_pp", &axs->new_pcap.permitted); in audit_log_exit()
1340 audit_log_cap(ab, "new_pi", &axs->new_pcap.inheritable); in audit_log_exit()
1341 audit_log_cap(ab, "new_pe", &axs->new_pcap.effective); in audit_log_exit()
1345 audit_log_end(ab); in audit_log_exit()
1352 ab = audit_log_start(context, GFP_KERNEL, AUDIT_FD_PAIR); in audit_log_exit()
1353 if (ab) { in audit_log_exit()
1354 audit_log_format(ab, "fd0=%d fd1=%d", in audit_log_exit()
1356 audit_log_end(ab); in audit_log_exit()
1361 ab = audit_log_start(context, GFP_KERNEL, AUDIT_SOCKADDR); in audit_log_exit()
1362 if (ab) { in audit_log_exit()
1363 audit_log_format(ab, "saddr="); in audit_log_exit()
1364 audit_log_n_hex(ab, (void *)context->sockaddr, in audit_log_exit()
1366 audit_log_end(ab); in audit_log_exit()
1391 ab = audit_log_start(context, GFP_KERNEL, AUDIT_CWD); in audit_log_exit()
1392 if (ab) { in audit_log_exit()
1393 audit_log_d_path(ab, " cwd=", &context->pwd); in audit_log_exit()
1394 audit_log_end(ab); in audit_log_exit()
1403 ab = audit_log_start(context, GFP_KERNEL, AUDIT_EOE); in audit_log_exit()
1404 if (ab) in audit_log_exit()
1405 audit_log_end(ab); in audit_log_exit()
1982 struct audit_buffer *ab; in audit_set_loginuid() local
1984 ab = audit_log_start(NULL, GFP_KERNEL, AUDIT_LOGIN); in audit_set_loginuid()
1985 if (ab) { in audit_set_loginuid()
1986 audit_log_format(ab, "login pid=%d uid=%u " in audit_set_loginuid()
1994 audit_log_end(ab); in audit_set_loginuid()
2342 static void audit_log_task(struct audit_buffer *ab) in audit_log_task() argument
2352 audit_log_format(ab, "auid=%u uid=%u gid=%u ses=%u", in audit_log_task()
2357 audit_log_task_context(ab); in audit_log_task()
2358 audit_log_format(ab, " pid=%d comm=", task_tgid_nr(current)); in audit_log_task()
2359 audit_log_untrustedstring(ab, current->comm); in audit_log_task()
2362 static void audit_log_abend(struct audit_buffer *ab, char *reason, long signr) in audit_log_abend() argument
2364 audit_log_task(ab); in audit_log_abend()
2365 audit_log_format(ab, " reason="); in audit_log_abend()
2366 audit_log_string(ab, reason); in audit_log_abend()
2367 audit_log_format(ab, " sig=%ld", signr); in audit_log_abend()
2378 struct audit_buffer *ab; in audit_core_dumps() local
2386 ab = audit_log_start(NULL, GFP_KERNEL, AUDIT_ANOM_ABEND); in audit_core_dumps()
2387 if (unlikely(!ab)) in audit_core_dumps()
2389 audit_log_abend(ab, "memory violation", signr); in audit_core_dumps()
2390 audit_log_end(ab); in audit_core_dumps()
2395 struct audit_buffer *ab; in __audit_seccomp() local
2397 ab = audit_log_start(NULL, GFP_KERNEL, AUDIT_SECCOMP); in __audit_seccomp()
2398 if (unlikely(!ab)) in __audit_seccomp()
2400 audit_log_task(ab); in __audit_seccomp()
2401 audit_log_format(ab, " sig=%ld", signr); in __audit_seccomp()
2402 audit_log_format(ab, " syscall=%ld", syscall); in __audit_seccomp()
2403 audit_log_format(ab, " compat=%d", is_compat_task()); in __audit_seccomp()
2404 audit_log_format(ab, " ip=0x%lx", KSTK_EIP(current)); in __audit_seccomp()
2405 audit_log_format(ab, " code=0x%x", code); in __audit_seccomp()
2406 audit_log_end(ab); in __audit_seccomp()