Searched refs:ab (Results 1 – 6 of 6) sorted by relevance
/kernel/ |
D | audit.c | 189 static void audit_set_portid(struct audit_buffer *ab, __u32 portid) in audit_set_portid() argument 191 if (ab) { in audit_set_portid() 192 struct nlmsghdr *nlh = nlmsg_hdr(ab->skb); in audit_set_portid() 286 struct audit_buffer *ab; in audit_log_config_change() local 289 ab = audit_log_start(NULL, GFP_KERNEL, AUDIT_CONFIG_CHANGE); in audit_log_config_change() 290 if (unlikely(!ab)) in audit_log_config_change() 292 audit_log_format(ab, "%s=%u old=%u", function_name, new, old); in audit_log_config_change() 293 audit_log_session_info(ab); in audit_log_config_change() 294 rc = audit_log_task_context(ab); in audit_log_config_change() 297 audit_log_format(ab, " res=%d", allow_changes); in audit_log_config_change() [all …]
|
D | auditsc.c | 988 struct audit_buffer *ab; in audit_log_pid_context() local 993 ab = audit_log_start(context, GFP_KERNEL, AUDIT_OBJ_PID); in audit_log_pid_context() 994 if (!ab) in audit_log_pid_context() 997 audit_log_format(ab, "opid=%d oauid=%d ouid=%d oses=%d", pid, in audit_log_pid_context() 1002 audit_log_format(ab, " obj=(none)"); in audit_log_pid_context() 1005 audit_log_format(ab, " obj=%s", ctx); in audit_log_pid_context() 1009 audit_log_format(ab, " ocomm="); in audit_log_pid_context() 1010 audit_log_untrustedstring(ab, comm); in audit_log_pid_context() 1011 audit_log_end(ab); in audit_log_pid_context() 1017 struct audit_buffer **ab) in audit_log_execve_info() argument [all …]
|
D | audit_watch.c | 241 struct audit_buffer *ab; in audit_watch_log_rule_change() local 242 ab = audit_log_start(NULL, GFP_NOFS, AUDIT_CONFIG_CHANGE); in audit_watch_log_rule_change() 243 if (unlikely(!ab)) in audit_watch_log_rule_change() 245 audit_log_format(ab, "auid=%u ses=%u op=", in audit_watch_log_rule_change() 248 audit_log_string(ab, op); in audit_watch_log_rule_change() 249 audit_log_format(ab, " path="); in audit_watch_log_rule_change() 250 audit_log_untrustedstring(ab, w->path); in audit_watch_log_rule_change() 251 audit_log_key(ab, r->filterkey); in audit_watch_log_rule_change() 252 audit_log_format(ab, " list=%d res=1", r->listnr); in audit_watch_log_rule_change() 253 audit_log_end(ab); in audit_watch_log_rule_change()
|
D | audit_tree.c | 455 struct audit_buffer *ab; in audit_tree_log_remove_rule() local 457 ab = audit_log_start(NULL, GFP_KERNEL, AUDIT_CONFIG_CHANGE); in audit_tree_log_remove_rule() 458 if (unlikely(!ab)) in audit_tree_log_remove_rule() 460 audit_log_format(ab, "op="); in audit_tree_log_remove_rule() 461 audit_log_string(ab, "remove_rule"); in audit_tree_log_remove_rule() 462 audit_log_format(ab, " dir="); in audit_tree_log_remove_rule() 463 audit_log_untrustedstring(ab, rule->tree->pathname); in audit_tree_log_remove_rule() 464 audit_log_key(ab, rule->filterkey); in audit_tree_log_remove_rule() 465 audit_log_format(ab, " list=%d res=1", rule->listnr); in audit_tree_log_remove_rule() 466 audit_log_end(ab); in audit_tree_log_remove_rule()
|
D | auditfilter.c | 1031 struct audit_buffer *ab; in audit_log_rule_change() local 1038 ab = audit_log_start(NULL, GFP_KERNEL, AUDIT_CONFIG_CHANGE); in audit_log_rule_change() 1039 if (!ab) in audit_log_rule_change() 1041 audit_log_format(ab, "auid=%u ses=%u" ,loginuid, sessionid); in audit_log_rule_change() 1042 audit_log_task_context(ab); in audit_log_rule_change() 1043 audit_log_format(ab, " op="); in audit_log_rule_change() 1044 audit_log_string(ab, action); in audit_log_rule_change() 1045 audit_log_key(ab, rule->filterkey); in audit_log_rule_change() 1046 audit_log_format(ab, " list=%d res=%d", rule->listnr, res); in audit_log_rule_change() 1047 audit_log_end(ab); in audit_log_rule_change()
|
D | audit.h | 223 extern void audit_log_cap(struct audit_buffer *ab, char *prefix,
|