Lines Matching defs:audit_record
171 struct audit_record { struct
173 u_int32_t ar_magic;
174 int ar_event;
175 int ar_retval; /* value returned to the process */
176 int ar_errno; /* return status of system call */
177 struct timespec ar_starttime;
178 struct timespec ar_endtime;
179 u_int64_t ar_valid_arg; /* Bitmask of valid arguments */
182 struct xucred ar_subj_cred;
183 uid_t ar_subj_ruid;
184 gid_t ar_subj_rgid;
185 gid_t ar_subj_egid;
186 uid_t ar_subj_auid; /* Audit user ID */
187 pid_t ar_subj_asid; /* Audit session ID */
188 pid_t ar_subj_pid;
189 struct au_tid ar_subj_term;
190 struct au_tid_addr ar_subj_term_addr;
191 struct au_mask ar_subj_amask;
194 uid_t ar_arg_euid;
195 uid_t ar_arg_ruid;
196 uid_t ar_arg_suid;
197 gid_t ar_arg_egid;
198 gid_t ar_arg_rgid;
199 gid_t ar_arg_sgid;
200 pid_t ar_arg_pid;
201 pid_t ar_arg_asid;
202 struct au_tid ar_arg_termid;
203 struct au_tid_addr ar_arg_termid_addr;
204 uid_t ar_arg_uid;
205 uid_t ar_arg_auid;
206 gid_t ar_arg_gid;
207 struct groupset ar_arg_groups;
208 int ar_arg_fd;
209 int ar_arg_atfd1;
210 int ar_arg_atfd2;
211 int ar_arg_fflags;
212 mode_t ar_arg_mode;
213 int ar_arg_dev; /* XXX dev_t compatibility */
214 long ar_arg_value;
215 void *ar_arg_addr;
216 int ar_arg_len;
217 int ar_arg_mask;
218 u_int ar_arg_signum;
219 char ar_arg_login[MAXLOGNAME];
220 int ar_arg_ctlname[CTL_MAXNAME];
221 struct socket_au_info ar_arg_sockinfo;
222 char *ar_arg_upath1;
223 char *ar_arg_upath2;
224 char *ar_arg_text;
225 struct au_mask ar_arg_amask;
226 struct vnode_au_info ar_arg_vnode1;
227 struct vnode_au_info ar_arg_vnode2;
228 int ar_arg_cmd;
229 int ar_arg_svipc_which;
230 int ar_arg_svipc_cmd;
231 struct ipc_perm ar_arg_svipc_perm;
232 int ar_arg_svipc_id;
233 void *ar_arg_svipc_addr;
234 struct posix_ipc_perm ar_arg_pipc_perm;
235 union auditon_udata ar_arg_auditon;
236 char *ar_arg_argv;
237 int ar_arg_argc;
238 char *ar_arg_envv;
239 int ar_arg_envc;
240 int ar_arg_exitstatus;
241 int ar_arg_exitretval;
242 struct sockaddr_storage ar_arg_sockaddr;
243 cap_rights_t ar_arg_rights;
244 uint32_t ar_arg_fcntl_rights;
245 char ar_jailname[MAXHOSTNAMELEN];