Cross Reference: /illumos-gate/usr/src/uts/common/c2/audit

Lines Matching defs:record
62  * end of a record and the second table determines the state for a
63  * buffer which is the end of a record.  The initial state is
133  * via softcall. Otherwise, defer by queueing the record onto the tad; at
145 	/* If not to be written, toss the record. */
227  * If time of event is specified, use it in the record, otherwise use the
234 	token_t 	*record;	/* au_membuf chain == the record */
244 	/* If not to be written, toss the record */
249 	/* if auditing not enabled, then don't generate an audit record */
260 		 * an audit record.
268 	/* Count up the bytes used in the record. */
300 		record = au_to_header_ex(byte_count, e_type, e_mod);
302 		record = au_to_header(byte_count, e_type, e_mod);
309 	adr_start(&hadr, memtod(record, char *));
320 	/* append body of audit record */
321 	(void) au_append_rec(record, dchain, AU_PACK);
326 		(void) au_append_rec(record, m, AU_PACK);
334 		/* link to audit record (i.e. don't pack the data) */
335 		(void) au_append_rec(record, m, AU_LINK);
348 		(void) au_append_rec(record, au_to_trailer(byte_count),
357 	au_enqueue(kctx, record, &hadr, &sadr, 1, flag & AU_DONTBLOCK);
359 	au_enqueue(kctx, record, &hadr, &sadr, 0, flag & AU_DONTBLOCK);
459  * if we sleep or we should drop the audit record.
462  * Returns 1 if the caller needs to free the record.
503  * if we reboot we should drop the audit record.
638 	int		part    = 0;	/* partial audit record written */
659 	sp   = NULL;	/* no record copied */
663 	cMB  = cAR;	/* start with first au_membuf of record */
669 		part = 1;	/* indicate audit record being processed */
688 			/* advance to next audit record */
692 			part = 0;	/* have a complete record */
708 			 * if we've successfully written an audit record,
709 			 * free records up to last full record copied
727  * Clean up thread audit state to clear out asynchronous audit record
745 	/* clean out partial audit record */
762 	/* could not generate audit record, clean up */
767 	/* just drop the record and return */
799 	/* if audit state off, then no audit record generation */