Lines Matching defs:audit_context
102 struct audit_context { struct
105 AUDIT_CTX_UNUSED, /* audit_context is currently unused */ argument
108 } context;
109 enum audit_state state, current_state;
110 unsigned int serial; /* serial number for record */
111 int major; /* syscall number */
112 int uring_op; /* uring operation */
113 struct timespec64 ctime; /* time of syscall entry */
114 unsigned long argv[4]; /* syscall arguments */
115 long return_code;/* syscall return code */
116 u64 prio;
117 int return_valid; /* return code is valid */
126 struct audit_names preallocated_names[AUDIT_NAMES];
127 int name_count; /* total records in names_list */
128 struct list_head names_list; /* struct audit_names->list anchor */
129 char *filterkey; /* key for rule that triggered record */
130 struct path pwd;
131 struct audit_aux_data *aux;
132 struct audit_aux_data *aux_pids;
133 struct sockaddr_storage *sockaddr;
134 size_t sockaddr_len;
136 pid_t ppid;
137 kuid_t uid, euid, suid, fsuid;
138 kgid_t gid, egid, sgid, fsgid;
139 unsigned long personality;
140 int arch;
142 pid_t target_pid;
143 kuid_t target_auid;
144 kuid_t target_uid;
145 unsigned int target_sessionid;
146 u32 target_sid;
147 char target_comm[TASK_COMM_LEN];
149 struct audit_tree_refs *trees, *first_trees;
150 struct list_head killed_trees;
151 int tree_count;
153 int type;
154 union {
209 int fds[2];
210 struct audit_proctitle proctitle;