Home
last modified time | relevance | path

Searched refs:ab (Results 1 – 6 of 6) sorted by relevance

/kernel/
Daudit.c172 static void audit_set_pid(struct audit_buffer *ab, pid_t pid) in audit_set_pid() argument
174 if (ab) { in audit_set_pid()
175 struct nlmsghdr *nlh = nlmsg_hdr(ab->skb); in audit_set_pid()
272 struct audit_buffer *ab; in audit_log_config_change() local
275 ab = audit_log_start(NULL, GFP_KERNEL, AUDIT_CONFIG_CHANGE); in audit_log_config_change()
276 if (unlikely(!ab)) in audit_log_config_change()
278 audit_log_format(ab, "%s=%d old=%d", function_name, new, old); in audit_log_config_change()
279 audit_log_session_info(ab); in audit_log_config_change()
280 rc = audit_log_task_context(ab); in audit_log_config_change()
283 audit_log_format(ab, " res=%d", allow_changes); in audit_log_config_change()
[all …]
Dauditsc.c978 struct audit_buffer *ab; in audit_log_pid_context() local
983 ab = audit_log_start(context, GFP_KERNEL, AUDIT_OBJ_PID); in audit_log_pid_context()
984 if (!ab) in audit_log_pid_context()
987 audit_log_format(ab, "opid=%d oauid=%d ouid=%d oses=%d", pid, in audit_log_pid_context()
992 audit_log_format(ab, " obj=(none)"); in audit_log_pid_context()
995 audit_log_format(ab, " obj=%s", ctx); in audit_log_pid_context()
999 audit_log_format(ab, " ocomm="); in audit_log_pid_context()
1000 audit_log_untrustedstring(ab, comm); in audit_log_pid_context()
1001 audit_log_end(ab); in audit_log_pid_context()
1007 struct audit_buffer **ab, in audit_log_execve_info() argument
[all …]
Daudit_watch.c241 struct audit_buffer *ab; in audit_watch_log_rule_change() local
242 ab = audit_log_start(NULL, GFP_NOFS, AUDIT_CONFIG_CHANGE); in audit_watch_log_rule_change()
243 if (unlikely(!ab)) in audit_watch_log_rule_change()
245 audit_log_format(ab, "auid=%u ses=%u op=", in audit_watch_log_rule_change()
248 audit_log_string(ab, op); in audit_watch_log_rule_change()
249 audit_log_format(ab, " path="); in audit_watch_log_rule_change()
250 audit_log_untrustedstring(ab, w->path); in audit_watch_log_rule_change()
251 audit_log_key(ab, r->filterkey); in audit_watch_log_rule_change()
252 audit_log_format(ab, " list=%d res=1", r->listnr); in audit_watch_log_rule_change()
253 audit_log_end(ab); in audit_watch_log_rule_change()
Daudit_tree.c454 struct audit_buffer *ab; in audit_log_remove_rule() local
456 ab = audit_log_start(NULL, GFP_KERNEL, AUDIT_CONFIG_CHANGE); in audit_log_remove_rule()
457 if (unlikely(!ab)) in audit_log_remove_rule()
459 audit_log_format(ab, "op="); in audit_log_remove_rule()
460 audit_log_string(ab, "remove rule"); in audit_log_remove_rule()
461 audit_log_format(ab, " dir="); in audit_log_remove_rule()
462 audit_log_untrustedstring(ab, rule->tree->pathname); in audit_log_remove_rule()
463 audit_log_key(ab, rule->filterkey); in audit_log_remove_rule()
464 audit_log_format(ab, " list=%d res=1", rule->listnr); in audit_log_remove_rule()
465 audit_log_end(ab); in audit_log_remove_rule()
Dauditfilter.c998 struct audit_buffer *ab; in audit_log_rule_change() local
1005 ab = audit_log_start(NULL, GFP_KERNEL, AUDIT_CONFIG_CHANGE); in audit_log_rule_change()
1006 if (!ab) in audit_log_rule_change()
1008 audit_log_format(ab, "auid=%u ses=%u" ,loginuid, sessionid); in audit_log_rule_change()
1009 audit_log_task_context(ab); in audit_log_rule_change()
1010 audit_log_format(ab, " op="); in audit_log_rule_change()
1011 audit_log_string(ab, action); in audit_log_rule_change()
1012 audit_log_key(ab, rule->filterkey); in audit_log_rule_change()
1013 audit_log_format(ab, " list=%d res=%d", rule->listnr, res); in audit_log_rule_change()
1014 audit_log_end(ab); in audit_log_rule_change()
Daudit.h213 extern void audit_log_cap(struct audit_buffer *ab, char *prefix,
215 extern void audit_log_fcaps(struct audit_buffer *ab, struct audit_names *name);