70 	struct proc_event *ev;  in proc_fork_connector()  local
78 	ev = (struct proc_event *)msg->data;  in proc_fork_connector()
79 	memset(&ev->event_data, 0, sizeof(ev->event_data));  in proc_fork_connector()
80 	get_seq(&msg->seq, &ev->cpu);  in proc_fork_connector()
81 	ev->timestamp_ns = ktime_get_ns();  in proc_fork_connector()
82 	ev->what = PROC_EVENT_FORK;  in proc_fork_connector()
85 	ev->event_data.fork.parent_pid = parent->pid;  in proc_fork_connector()
86 	ev->event_data.fork.parent_tgid = parent->tgid;  in proc_fork_connector()
88 	ev->event_data.fork.child_pid = task->pid;  in proc_fork_connector()
89 	ev->event_data.fork.child_tgid = task->tgid;  in proc_fork_connector()
93 	msg->len = sizeof(*ev);  in proc_fork_connector()
102 	struct proc_event *ev;  in proc_exec_connector()  local
109 	ev = (struct proc_event *)msg->data;  in proc_exec_connector()
110 	memset(&ev->event_data, 0, sizeof(ev->event_data));  in proc_exec_connector()
111 	get_seq(&msg->seq, &ev->cpu);  in proc_exec_connector()
112 	ev->timestamp_ns = ktime_get_ns();  in proc_exec_connector()
113 	ev->what = PROC_EVENT_EXEC;  in proc_exec_connector()
114 	ev->event_data.exec.process_pid = task->pid;  in proc_exec_connector()
115 	ev->event_data.exec.process_tgid = task->tgid;  in proc_exec_connector()
119 	msg->len = sizeof(*ev);  in proc_exec_connector()
127 	struct proc_event *ev;  in proc_id_connector()  local
135 	ev = (struct proc_event *)msg->data;  in proc_id_connector()
136 	memset(&ev->event_data, 0, sizeof(ev->event_data));  in proc_id_connector()
137 	ev->what = which_id;  in proc_id_connector()
138 	ev->event_data.id.process_pid = task->pid;  in proc_id_connector()
139 	ev->event_data.id.process_tgid = task->tgid;  in proc_id_connector()
143 		ev->event_data.id.r.ruid = from_kuid_munged(&init_user_ns, cred->uid);  in proc_id_connector()
144 		ev->event_data.id.e.euid = from_kuid_munged(&init_user_ns, cred->euid);  in proc_id_connector()
146 		ev->event_data.id.r.rgid = from_kgid_munged(&init_user_ns, cred->gid);  in proc_id_connector()
147 		ev->event_data.id.e.egid = from_kgid_munged(&init_user_ns, cred->egid);  in proc_id_connector()
153 	get_seq(&msg->seq, &ev->cpu);  in proc_id_connector()
154 	ev->timestamp_ns = ktime_get_ns();  in proc_id_connector()
158 	msg->len = sizeof(*ev);  in proc_id_connector()
166 	struct proc_event *ev;  in proc_sid_connector()  local
173 	ev = (struct proc_event *)msg->data;  in proc_sid_connector()
174 	memset(&ev->event_data, 0, sizeof(ev->event_data));  in proc_sid_connector()
175 	get_seq(&msg->seq, &ev->cpu);  in proc_sid_connector()
176 	ev->timestamp_ns = ktime_get_ns();  in proc_sid_connector()
177 	ev->what = PROC_EVENT_SID;  in proc_sid_connector()
178 	ev->event_data.sid.process_pid = task->pid;  in proc_sid_connector()
179 	ev->event_data.sid.process_tgid = task->tgid;  in proc_sid_connector()
183 	msg->len = sizeof(*ev);  in proc_sid_connector()
191 	struct proc_event *ev;  in proc_ptrace_connector()  local
198 	ev = (struct proc_event *)msg->data;  in proc_ptrace_connector()
199 	memset(&ev->event_data, 0, sizeof(ev->event_data));  in proc_ptrace_connector()
200 	get_seq(&msg->seq, &ev->cpu);  in proc_ptrace_connector()
201 	ev->timestamp_ns = ktime_get_ns();  in proc_ptrace_connector()
202 	ev->what = PROC_EVENT_PTRACE;  in proc_ptrace_connector()
203 	ev->event_data.ptrace.process_pid  = task->pid;  in proc_ptrace_connector()
204 	ev->event_data.ptrace.process_tgid = task->tgid;  in proc_ptrace_connector()
206 		ev->event_data.ptrace.tracer_pid  = current->pid;  in proc_ptrace_connector()
207 		ev->event_data.ptrace.tracer_tgid = current->tgid;  in proc_ptrace_connector()
209 		ev->event_data.ptrace.tracer_pid  = 0;  in proc_ptrace_connector()
210 		ev->event_data.ptrace.tracer_tgid = 0;  in proc_ptrace_connector()
216 	msg->len = sizeof(*ev);  in proc_ptrace_connector()
224 	struct proc_event *ev;  in proc_comm_connector()  local
231 	ev = (struct proc_event *)msg->data;  in proc_comm_connector()
232 	memset(&ev->event_data, 0, sizeof(ev->event_data));  in proc_comm_connector()
233 	get_seq(&msg->seq, &ev->cpu);  in proc_comm_connector()
234 	ev->timestamp_ns = ktime_get_ns();  in proc_comm_connector()
235 	ev->what = PROC_EVENT_COMM;  in proc_comm_connector()
236 	ev->event_data.comm.process_pid  = task->pid;  in proc_comm_connector()
237 	ev->event_data.comm.process_tgid = task->tgid;  in proc_comm_connector()
238 	get_task_comm(ev->event_data.comm.comm, task);  in proc_comm_connector()
242 	msg->len = sizeof(*ev);  in proc_comm_connector()
250 	struct proc_event *ev;  in proc_coredump_connector()  local
257 	ev = (struct proc_event *)msg->data;  in proc_coredump_connector()
258 	memset(&ev->event_data, 0, sizeof(ev->event_data));  in proc_coredump_connector()
259 	get_seq(&msg->seq, &ev->cpu);  in proc_coredump_connector()
260 	ev->timestamp_ns = ktime_get_ns();  in proc_coredump_connector()
261 	ev->what = PROC_EVENT_COREDUMP;  in proc_coredump_connector()
262 	ev->event_data.coredump.process_pid = task->pid;  in proc_coredump_connector()
263 	ev->event_data.coredump.process_tgid = task->tgid;  in proc_coredump_connector()
267 	msg->len = sizeof(*ev);  in proc_coredump_connector()
275 	struct proc_event *ev;  in proc_exit_connector()  local
282 	ev = (struct proc_event *)msg->data;  in proc_exit_connector()
283 	memset(&ev->event_data, 0, sizeof(ev->event_data));  in proc_exit_connector()
284 	get_seq(&msg->seq, &ev->cpu);  in proc_exit_connector()
285 	ev->timestamp_ns = ktime_get_ns();  in proc_exit_connector()
286 	ev->what = PROC_EVENT_EXIT;  in proc_exit_connector()
287 	ev->event_data.exit.process_pid = task->pid;  in proc_exit_connector()
288 	ev->event_data.exit.process_tgid = task->tgid;  in proc_exit_connector()
289 	ev->event_data.exit.exit_code = task->exit_code;  in proc_exit_connector()
290 	ev->event_data.exit.exit_signal = task->exit_signal;  in proc_exit_connector()
294 	msg->len = sizeof(*ev);  in proc_exit_connector()
310 	struct proc_event *ev;  in cn_proc_ack()  local
317 	ev = (struct proc_event *)msg->data;  in cn_proc_ack()
318 	memset(&ev->event_data, 0, sizeof(ev->event_data));  in cn_proc_ack()
320 	ev->timestamp_ns = ktime_get_ns();  in cn_proc_ack()
321 	ev->cpu = -1;  in cn_proc_ack()
322 	ev->what = PROC_EVENT_NONE;  in cn_proc_ack()
323 	ev->event_data.ack.err = err;  in cn_proc_ack()
326 	msg->len = sizeof(*ev);  in cn_proc_ack()