232 	switch(audit_classify_arch(arch->val)) {  in audit_match_signal()
389 		if ((f->val != 0) && (f->val != 1))  in audit_field_valid()
397 		if (f->val & ~15)  in audit_field_valid()
401 		if (f->val & ~S_IFMT)  in audit_field_valid()
405 		if (f->val > AUDIT_MAX_FIELD_COMPARE)  in audit_field_valid()
445 		f->val = data->values[i];  in audit_data_to_entry()
448 		if ((f->type == AUDIT_LOGINUID) && (f->val == AUDIT_UID_UNSET)) {  in audit_data_to_entry()
450 			f->val = 0;  in audit_data_to_entry()
466 			f->uid = make_kuid(current_user_ns(), f->val);  in audit_data_to_entry()
475 			f->gid = make_kgid(current_user_ns(), f->val);  in audit_data_to_entry()
492 			str = audit_unpack_string(&bufp, &remain, f->val);  in audit_data_to_entry()
495 			entry->rule.buflen += f->val;  in audit_data_to_entry()
513 			str = audit_unpack_string(&bufp, &remain, f->val);  in audit_data_to_entry()
516 			entry->rule.buflen += f->val;  in audit_data_to_entry()
518 			err = audit_to_watch(&entry->rule, str, f->val, f->op);  in audit_data_to_entry()
525 			str = audit_unpack_string(&bufp, &remain, f->val);  in audit_data_to_entry()
528 			entry->rule.buflen += f->val;  in audit_data_to_entry()
541 			if (entry->rule.filterkey || f->val > AUDIT_MAX_KEY_LEN)  in audit_data_to_entry()
543 			str = audit_unpack_string(&bufp, &remain, f->val);  in audit_data_to_entry()
546 			entry->rule.buflen += f->val;  in audit_data_to_entry()
550 			if (entry->rule.exe || f->val > PATH_MAX)  in audit_data_to_entry()
552 			str = audit_unpack_string(&bufp, &remain, f->val);  in audit_data_to_entry()
557 			entry->rule.buflen += f->val;  in audit_data_to_entry()
559 			audit_mark = audit_alloc_mark(&entry->rule, str, f->val);  in audit_data_to_entry()
650 			if (krule->pflags & AUDIT_LOGINUID_LEGACY && !f->val) {  in audit_krule_to_data()
657 			data->values[i] = f->val;  in audit_krule_to_data()
736 			if (a->fields[i].val != b->fields[i].val)  in audit_compare_rule()
870 		h = audit_hash_ino(entry->rule.inode_f->val);  in audit_find_rule()
1312 				result = audit_comparator(pid, f->op, f->val);  in audit_filter()
1326 							  f->op, f->val);  in audit_filter()
1329 				result = audit_comparator(msgtype, f->op, f->val);  in audit_filter()