Lines Matching refs:audit
28 * This file contains the audit event table used to control the production
29 * of audit records for each system call.
60 #include <c2/audit.h>
186 * to audit event IDs. In several cases it is necessary to map a single system
267 aui_null, AUE_NULL, aus_null, /* 31 stty (TIOCSETP-audit?) */
1639 /* no error, then already path token in audit record */
1694 /* no error, then already path token in audit record */
1991 * considered public, skip the audit.
1997 /* free any residual audit data */
2646 /* add path name to audit record */
2686 /* add path name to audit record */
2729 /* add path name to audit record */
2770 /* add path name to audit record */
3263 /* only audit privileged operations for systeminfo(2) system call */
3565 * in sysent => no fd, nothing to audit here, returning
3579 * so no extra tokens. Should probably turn off audit record
3651 * bind failed, then nothing extra to add to audit record.
3662 * so no extra tokens. Should probably turn off audit record
3730 * so no extra tokens. Should probably turn off audit record
3818 * so no extra tokens. Should probably turn off audit record
3921 * so no extra tokens. Should probably turn off audit record
4062 * only audit recvmsg when the system call represents the creation of a new
4107 * so no extra tokens. Should probably turn off audit record
4174 /* don't want to audit every recvmsg attempt */
4176 /* free any residual audit data */
4220 /* don't want to audit every recvmsg attempt */
4222 /* free any residual audit data */
4308 * so no extra tokens. Should probably turn off audit record
4376 /* don't want to audit every recvfrom attempt */
4378 /* free any residual audit data */
4421 /* don't want to audit every recvfrom attempt */
4423 /* free any residual audit data */
4505 * so no extra tokens. Should probably turn off audit record
4566 /* don't want to audit every sendmsg attempt */
4568 /* free any residual audit data */
4612 /* don't want to audit every sendmsg attempt */
4614 /* free any residual audit data */
4695 * so no extra tokens. Should probably turn off audit record
4762 /* don't want to audit every sendto attempt */
4764 /* free any residual audit data */
4807 /* don't want to audit every sendto attempt */
4809 /* free any residual audit data */
5126 * audit formats for several of the
5461 /* don't really want to audit every read attempt */
5463 /* free any residual audit data */
5518 /* don't really want to audit every write attempt */
5520 /* free any residual audit data */
5564 * audit record on first successful recv.
5567 /* Turn off audit record generation here. */
5569 /* free any residual audit data */
5577 /* Turn off audit record generation here. */
5579 /* free any residual audit data */
5593 /* don't really want to audit every recv call */
5595 /* free any residual audit data */
5636 /* don't really want to audit every recv call */
5638 /* free any residual audit data */
5700 * audit record on first successful send.
5703 /* Turn off audit record generation here. */
5705 /* free any residual audit data */
5713 /* Turn off audit record generation here. */
5715 /* free any residual audit data */
5729 /* don't really want to audit every send call */
5731 /* free any residual audit data */
5771 /* don't really want to audit every send call */
5773 /* free any residual audit data */