Searched refs:audit (Results 126 - 150 of 165) sorted by relevance
1234567
/illumos-gate/usr/src/lib/auditd_plugins/syslog/ |
H A D | sysplugin.c | 25 * convert binary audit records to syslog messages and 62 #include <bsm/audit.h> 95 * make about a 40% difference for short audit records and regularly 186 * current audit record. The input is 1 for success, -1 for 821 __audit_syslog("audit", LOG_NDELAY, 830 "Unable to parse audit record"));
|
/illumos-gate/usr/src/cmd/rexd/ |
H A D | rpc.rexd.c | 65 #include <bsm/audit.h> 1162 errprintf("cannot set audit characteristics\n");
|
/illumos-gate/usr/src/uts/common/fs/ |
H A D | lookup.c | 56 #include <c2/audit.h>
|
/illumos-gate/usr/src/uts/common/os/ |
H A D | ipc.c | 422 #include <c2/audit.h>
|
H A D | shm.c | 125 #include <c2/audit.h>
|
H A D | exit.c | 55 #include <c2/audit.h> 576 * audit exit system call
|
H A D | msg.c | 94 #include <c2/audit.h>
|
H A D | fio.c | 61 #include <c2/audit.h> 933 * audit close of file (may be exit)
|
H A D | cred.c | 60 #include <c2/audit.h> 175 /* assure audit context is 64-bit aligned */ 516 * done through use of privilege in the audit trail. 938 * to determine whether audit info should be included.
|
H A D | fork.c | 62 #include <c2/audit.h> 1177 * Duplicate any audit information kept in the process table 1179 if (audit_active) /* copy audit data to cp */
|
H A D | sysent.c | 39 #include <c2/audit.h>
|
/illumos-gate/usr/src/uts/common/syscall/ |
H A D | sem.c | 143 #include <c2/audit.h>
|
/illumos-gate/usr/src/uts/sparc/os/ |
H A D | syscall.c | 53 #include <c2/audit.h> 558 /* put out audit record for this syscall */
|
/illumos-gate/usr/src/uts/intel/ia32/os/ |
H A D | syscall.c | 53 #include <c2/audit.h> 307 * post_syscall (like audit). Here, we 470 /* put out audit record for this syscall */
|
/illumos-gate/usr/src/uts/i86pc/os/ |
H A D | machdep.c | 136 #include <c2/audit.h>
|
H A D | trap.c | 90 #include <c2/audit.h> 2012 if (auditing) /* audit core dump */ 2015 if (auditing) /* audit core dump */
|
/illumos-gate/usr/src/uts/common/c2/ |
H A D | audit_token.c | 27 * Support routines for building audit records. 46 #include <c2/audit.h> 84 /* audit record */ 85 adr_char(&adr, &version, 1); /* version of audit tokens */ 119 /* audit record */ 120 adr_char(&adr, &version, 1); /* version of audit tokens */ 155 /* audit record */
|
H A D | audit.c | 27 * This file contains the audit hook support code for auditing. 51 #include <c2/audit.h> /* needs to be included before user.h */ 101 * Noise elimination in audit trails - this event will be discarded if: 130 * TAD_PATHFND means path already included in this audit record. It 163 /* add token to audit record for this name */ 294 * TAD_PATHFND means path already included in this audit record. It 364 * TAD_PATHFND means path already included in this audit record. It 414 * returns: 1 - if audit policy and object attributes indicate that 471 * Flag it in the tad to prevent this audit at the end. 504 * audit recor [all...] |
/illumos-gate/usr/src/man/man1m/ |
H A D | Makefile | 41 audit.1m \
|
/illumos-gate/usr/src/lib/libbsm/common/ |
H A D | adt.c | 29 #include <bsm/audit.h> 71 * Local audit states are a bit mask 73 * The global audit states are 80 * AUC_AUDITING 0x1 - audit daemon is active 81 * AUC_NOAUDIT 0x2 - audit daemon is not active 82 * AUC_INIT_AUDIT 0x4 - audit is ready but auditd has not run 83 * AUC_NOSPACE 0x8 - audit enabled, no space for audit records 88 * The pseudo audit state used when the c2audit module is excluded is 99 * the underlying audit cod [all...] |
H A D | au_to.c | 29 #include <bsm/audit.h> 101 adr_int32(&adr, &byte_count, 1); /* length of audit record */ 102 adr_char(&adr, &version, 1); /* version of audit tokens */ 160 adr_int32(&adr, &byte_count, 1); /* length of audit record */ 161 adr_char(&adr, &version, 1); /* version of audit tokens */ 195 adr_int32(&adr, &byte_count, 1); /* length of audit record */
|
/illumos-gate/usr/src/uts/common/disp/ |
H A D | thread.c | 55 #include <c2/audit.h>
|
/illumos-gate/usr/src/cmd/praudit/ |
H A D | token.c | 62 #include <bsm/audit.h> 1026 * Every audit record generated contains a return token. 1035 * For audit records generated by the kernel: 1041 * For audit records generated at the user level: 1125 * Every audit record generated contains a return token. 1134 * For audit records generated by the kernel: 1140 * For audit records generated at the user level:
|
/illumos-gate/usr/src/uts/common/fs/sockfs/ |
H A D | socksubr.c | 70 #include <c2/audit.h>
|
/illumos-gate/usr/src/lib/brand/solaris10/s10_brand/common/ |
H A D | s10_brand.c | 53 #include <bsm/audit.h>
|
Completed in 156 milliseconds
1234567