55  * probes, which use the event's name to create the probe:
68  * probe activity with the event described in the record.  The latter gives
85  *   a catch-all probe for those events without mappings?
97  *   into the probe explicitly (e.g., as arg0), since it would no longer be
98  *   available as the probe function name.
119  * Strings for the "module" and "name" portions of the probe.  The name of the
120  * audit event will be the "function" portion of the probe.  All dtaudit
157  * minimise probe effect when not used at all, we not only check for the probe
159  * one probe is enabled, before acquiring locks, searching lists, etc.
168  * additional probe types (e.g., event clases).
170  * XXXRW: Should we have a catch-all probe here for events without registered
206  * Commit probe pre-BSM.  Fires the probe but also checks to see if we should
210  * XXXRW: Should we have a catch-all probe here for events without registered
226 	 * Process a possibly registered commit probe.  in dtaudit_commit()
232 		 * here.  At least we don't run the DTrace probe under the  in dtaudit_commit()
247 	 * Return the state of the BSM probe to the caller.  in dtaudit_commit()
253  * Commit probe post-BSM.
255  * XXXRW: Should we have a catch-all probe here for events without registered
275 	 * we don't run the DTrace probe under the lock.  in dtaudit_bsm()
357 	 * DTrace, by convention, has lower-case probe names.  However, the  in dtaudit_au_evnamemap_callback()
361 	 * to DTrace as part of the name of a probe.  in dtaudit_au_evnamemap_callback()
371 	 * Don't register a new probe if this event number already has an  in dtaudit_au_evnamemap_callback()
372 	 * associated commit probe -- or if another event has already  in dtaudit_au_evnamemap_callback()
376 	 * a single name, they should all be exposed to the same named probe.  in dtaudit_au_evnamemap_callback()
377 	 * In particular, we should perhaps use a probe ID returned by this  in dtaudit_au_evnamemap_callback()
378 	 * lookup and just stick that in the saved probe ID?  in dtaudit_au_evnamemap_callback()
384 		 * Create the commit probe.  in dtaudit_au_evnamemap_callback()
391 		 * can easily change its enabled flag in the probe  in dtaudit_au_evnamemap_callback()
400 	 * Don't register a new probe if this event number already has an  in dtaudit_au_evnamemap_callback()
401 	 * associated bsm probe -- or if another event has already  in dtaudit_au_evnamemap_callback()
405 	 * a single name, they should all be exposed to the same named probe.  in dtaudit_au_evnamemap_callback()
406 	 * In particular, we should perhaps use a probe ID returned by this  in dtaudit_au_evnamemap_callback()
407 	 * lookup and just stick that in the saved probe ID?  in dtaudit_au_evnamemap_callback()
413 		 * Create the bsm probe.  in dtaudit_au_evnamemap_callback()
420 		 * can easily change its enabled flag in the probe  in dtaudit_au_evnamemap_callback()
452 	    ("%s: probe ID mismatch (%u, %u != %u)", __func__,  in dtaudit_enable()
470 	    ("%s: probe ID mismatch (%u, %u != %u)", __func__,  in dtaudit_disable()