Searched refs:ab (Results 1 – 6 of 6) sorted by relevance
/kernel/ |
D | audit.c | 172 static void audit_set_pid(struct audit_buffer *ab, pid_t pid) in audit_set_pid() argument 174 if (ab) { in audit_set_pid() 175 struct nlmsghdr *nlh = nlmsg_hdr(ab->skb); in audit_set_pid() 272 struct audit_buffer *ab; in audit_log_config_change() local 275 ab = audit_log_start(NULL, GFP_KERNEL, AUDIT_CONFIG_CHANGE); in audit_log_config_change() 276 if (unlikely(!ab)) in audit_log_config_change() 278 audit_log_format(ab, "%s=%d old=%d", function_name, new, old); in audit_log_config_change() 279 audit_log_session_info(ab); in audit_log_config_change() 280 rc = audit_log_task_context(ab); in audit_log_config_change() 283 audit_log_format(ab, " res=%d", allow_changes); in audit_log_config_change() [all …]
|
D | auditsc.c | 978 struct audit_buffer *ab; in audit_log_pid_context() local 983 ab = audit_log_start(context, GFP_KERNEL, AUDIT_OBJ_PID); in audit_log_pid_context() 984 if (!ab) in audit_log_pid_context() 987 audit_log_format(ab, "opid=%d oauid=%d ouid=%d oses=%d", pid, in audit_log_pid_context() 992 audit_log_format(ab, " obj=(none)"); in audit_log_pid_context() 995 audit_log_format(ab, " obj=%s", ctx); in audit_log_pid_context() 999 audit_log_format(ab, " ocomm="); in audit_log_pid_context() 1000 audit_log_untrustedstring(ab, comm); in audit_log_pid_context() 1001 audit_log_end(ab); in audit_log_pid_context() 1007 struct audit_buffer **ab, in audit_log_execve_info() argument [all …]
|
D | audit_watch.c | 241 struct audit_buffer *ab; in audit_watch_log_rule_change() local 242 ab = audit_log_start(NULL, GFP_NOFS, AUDIT_CONFIG_CHANGE); in audit_watch_log_rule_change() 243 if (unlikely(!ab)) in audit_watch_log_rule_change() 245 audit_log_format(ab, "auid=%u ses=%u op=", in audit_watch_log_rule_change() 248 audit_log_string(ab, op); in audit_watch_log_rule_change() 249 audit_log_format(ab, " path="); in audit_watch_log_rule_change() 250 audit_log_untrustedstring(ab, w->path); in audit_watch_log_rule_change() 251 audit_log_key(ab, r->filterkey); in audit_watch_log_rule_change() 252 audit_log_format(ab, " list=%d res=1", r->listnr); in audit_watch_log_rule_change() 253 audit_log_end(ab); in audit_watch_log_rule_change()
|
D | audit_tree.c | 454 struct audit_buffer *ab; in audit_log_remove_rule() local 456 ab = audit_log_start(NULL, GFP_KERNEL, AUDIT_CONFIG_CHANGE); in audit_log_remove_rule() 457 if (unlikely(!ab)) in audit_log_remove_rule() 459 audit_log_format(ab, "op="); in audit_log_remove_rule() 460 audit_log_string(ab, "remove rule"); in audit_log_remove_rule() 461 audit_log_format(ab, " dir="); in audit_log_remove_rule() 462 audit_log_untrustedstring(ab, rule->tree->pathname); in audit_log_remove_rule() 463 audit_log_key(ab, rule->filterkey); in audit_log_remove_rule() 464 audit_log_format(ab, " list=%d res=1", rule->listnr); in audit_log_remove_rule() 465 audit_log_end(ab); in audit_log_remove_rule()
|
D | auditfilter.c | 998 struct audit_buffer *ab; in audit_log_rule_change() local 1005 ab = audit_log_start(NULL, GFP_KERNEL, AUDIT_CONFIG_CHANGE); in audit_log_rule_change() 1006 if (!ab) in audit_log_rule_change() 1008 audit_log_format(ab, "auid=%u ses=%u" ,loginuid, sessionid); in audit_log_rule_change() 1009 audit_log_task_context(ab); in audit_log_rule_change() 1010 audit_log_format(ab, " op="); in audit_log_rule_change() 1011 audit_log_string(ab, action); in audit_log_rule_change() 1012 audit_log_key(ab, rule->filterkey); in audit_log_rule_change() 1013 audit_log_format(ab, " list=%d res=%d", rule->listnr, res); in audit_log_rule_change() 1014 audit_log_end(ab); in audit_log_rule_change()
|
D | audit.h | 213 extern void audit_log_cap(struct audit_buffer *ab, char *prefix, 215 extern void audit_log_fcaps(struct audit_buffer *ab, struct audit_names *name);
|