Searched refs:audit (Results 126 - 150 of 165) sorted by relevance

1234567

/illumos-gate/usr/src/lib/auditd_plugins/syslog/
H A Dsysplugin.c25 * convert binary audit records to syslog messages and
62 #include <bsm/audit.h>
95 * make about a 40% difference for short audit records and regularly
186 * current audit record. The input is 1 for success, -1 for
821 __audit_syslog("audit", LOG_NDELAY,
830 "Unable to parse audit record"));
/illumos-gate/usr/src/cmd/rexd/
H A Drpc.rexd.c65 #include <bsm/audit.h>
1162 errprintf("cannot set audit characteristics\n");
/illumos-gate/usr/src/uts/common/fs/
H A Dlookup.c56 #include <c2/audit.h>
/illumos-gate/usr/src/uts/common/os/
H A Dipc.c422 #include <c2/audit.h>
H A Dshm.c125 #include <c2/audit.h>
H A Dexit.c55 #include <c2/audit.h>
576 * audit exit system call
H A Dmsg.c94 #include <c2/audit.h>
H A Dfio.c61 #include <c2/audit.h>
933 * audit close of file (may be exit)
H A Dcred.c60 #include <c2/audit.h>
175 /* assure audit context is 64-bit aligned */
516 * done through use of privilege in the audit trail.
938 * to determine whether audit info should be included.
H A Dfork.c62 #include <c2/audit.h>
1177 * Duplicate any audit information kept in the process table
1179 if (audit_active) /* copy audit data to cp */
H A Dsysent.c39 #include <c2/audit.h>
/illumos-gate/usr/src/uts/common/syscall/
H A Dsem.c143 #include <c2/audit.h>
/illumos-gate/usr/src/uts/sparc/os/
H A Dsyscall.c53 #include <c2/audit.h>
558 /* put out audit record for this syscall */
/illumos-gate/usr/src/uts/intel/ia32/os/
H A Dsyscall.c53 #include <c2/audit.h>
307 * post_syscall (like audit). Here, we
470 /* put out audit record for this syscall */
/illumos-gate/usr/src/uts/i86pc/os/
H A Dmachdep.c136 #include <c2/audit.h>
H A Dtrap.c90 #include <c2/audit.h>
2012 if (auditing) /* audit core dump */
2015 if (auditing) /* audit core dump */
/illumos-gate/usr/src/uts/common/c2/
H A Daudit_token.c27 * Support routines for building audit records.
46 #include <c2/audit.h>
84 /* audit record */
85 adr_char(&adr, &version, 1); /* version of audit tokens */
119 /* audit record */
120 adr_char(&adr, &version, 1); /* version of audit tokens */
155 /* audit record */
H A Daudit.c27 * This file contains the audit hook support code for auditing.
51 #include <c2/audit.h> /* needs to be included before user.h */
101 * Noise elimination in audit trails - this event will be discarded if:
130 * TAD_PATHFND means path already included in this audit record. It
163 /* add token to audit record for this name */
294 * TAD_PATHFND means path already included in this audit record. It
364 * TAD_PATHFND means path already included in this audit record. It
414 * returns: 1 - if audit policy and object attributes indicate that
471 * Flag it in the tad to prevent this audit at the end.
504 * audit recor
[all...]
/illumos-gate/usr/src/man/man1m/
H A DMakefile41 audit.1m \
/illumos-gate/usr/src/lib/libbsm/common/
H A Dadt.c29 #include <bsm/audit.h>
71 * Local audit states are a bit mask
73 * The global audit states are
80 * AUC_AUDITING 0x1 - audit daemon is active
81 * AUC_NOAUDIT 0x2 - audit daemon is not active
82 * AUC_INIT_AUDIT 0x4 - audit is ready but auditd has not run
83 * AUC_NOSPACE 0x8 - audit enabled, no space for audit records
88 * The pseudo audit state used when the c2audit module is excluded is
99 * the underlying audit cod
[all...]
H A Dau_to.c29 #include <bsm/audit.h>
101 adr_int32(&adr, &byte_count, 1); /* length of audit record */
102 adr_char(&adr, &version, 1); /* version of audit tokens */
160 adr_int32(&adr, &byte_count, 1); /* length of audit record */
161 adr_char(&adr, &version, 1); /* version of audit tokens */
195 adr_int32(&adr, &byte_count, 1); /* length of audit record */
/illumos-gate/usr/src/uts/common/disp/
H A Dthread.c55 #include <c2/audit.h>
/illumos-gate/usr/src/cmd/praudit/
H A Dtoken.c62 #include <bsm/audit.h>
1026 * Every audit record generated contains a return token.
1035 * For audit records generated by the kernel:
1041 * For audit records generated at the user level:
1125 * Every audit record generated contains a return token.
1134 * For audit records generated by the kernel:
1140 * For audit records generated at the user level:
/illumos-gate/usr/src/uts/common/fs/sockfs/
H A Dsocksubr.c70 #include <c2/audit.h>
/illumos-gate/usr/src/lib/brand/solaris10/s10_brand/common/
H A Ds10_brand.c53 #include <bsm/audit.h>

Completed in 156 milliseconds

1234567