Lines Matching refs:ev

79 	struct proc_event *ev;  in proc_fork_connector()  local
87 ev = (struct proc_event *)msg->data; in proc_fork_connector()
88 memset(&ev->event_data, 0, sizeof(ev->event_data)); in proc_fork_connector()
89 ev->timestamp_ns = ktime_get_ns(); in proc_fork_connector()
90 ev->what = PROC_EVENT_FORK; in proc_fork_connector()
93 ev->event_data.fork.parent_pid = parent->pid; in proc_fork_connector()
94 ev->event_data.fork.parent_tgid = parent->tgid; in proc_fork_connector()
96 ev->event_data.fork.child_pid = task->pid; in proc_fork_connector()
97 ev->event_data.fork.child_tgid = task->tgid; in proc_fork_connector()
101 msg->len = sizeof(*ev); in proc_fork_connector()
109 struct proc_event *ev; in proc_exec_connector() local
116 ev = (struct proc_event *)msg->data; in proc_exec_connector()
117 memset(&ev->event_data, 0, sizeof(ev->event_data)); in proc_exec_connector()
118 ev->timestamp_ns = ktime_get_ns(); in proc_exec_connector()
119 ev->what = PROC_EVENT_EXEC; in proc_exec_connector()
120 ev->event_data.exec.process_pid = task->pid; in proc_exec_connector()
121 ev->event_data.exec.process_tgid = task->tgid; in proc_exec_connector()
125 msg->len = sizeof(*ev); in proc_exec_connector()
133 struct proc_event *ev; in proc_id_connector() local
141 ev = (struct proc_event *)msg->data; in proc_id_connector()
142 memset(&ev->event_data, 0, sizeof(ev->event_data)); in proc_id_connector()
143 ev->what = which_id; in proc_id_connector()
144 ev->event_data.id.process_pid = task->pid; in proc_id_connector()
145 ev->event_data.id.process_tgid = task->tgid; in proc_id_connector()
149 ev->event_data.id.r.ruid = from_kuid_munged(&init_user_ns, cred->uid); in proc_id_connector()
150 ev->event_data.id.e.euid = from_kuid_munged(&init_user_ns, cred->euid); in proc_id_connector()
152 ev->event_data.id.r.rgid = from_kgid_munged(&init_user_ns, cred->gid); in proc_id_connector()
153 ev->event_data.id.e.egid = from_kgid_munged(&init_user_ns, cred->egid); in proc_id_connector()
159 ev->timestamp_ns = ktime_get_ns(); in proc_id_connector()
163 msg->len = sizeof(*ev); in proc_id_connector()
171 struct proc_event *ev; in proc_sid_connector() local
178 ev = (struct proc_event *)msg->data; in proc_sid_connector()
179 memset(&ev->event_data, 0, sizeof(ev->event_data)); in proc_sid_connector()
180 ev->timestamp_ns = ktime_get_ns(); in proc_sid_connector()
181 ev->what = PROC_EVENT_SID; in proc_sid_connector()
182 ev->event_data.sid.process_pid = task->pid; in proc_sid_connector()
183 ev->event_data.sid.process_tgid = task->tgid; in proc_sid_connector()
187 msg->len = sizeof(*ev); in proc_sid_connector()
195 struct proc_event *ev; in proc_ptrace_connector() local
202 ev = (struct proc_event *)msg->data; in proc_ptrace_connector()
203 memset(&ev->event_data, 0, sizeof(ev->event_data)); in proc_ptrace_connector()
204 ev->timestamp_ns = ktime_get_ns(); in proc_ptrace_connector()
205 ev->what = PROC_EVENT_PTRACE; in proc_ptrace_connector()
206 ev->event_data.ptrace.process_pid = task->pid; in proc_ptrace_connector()
207 ev->event_data.ptrace.process_tgid = task->tgid; in proc_ptrace_connector()
209 ev->event_data.ptrace.tracer_pid = current->pid; in proc_ptrace_connector()
210 ev->event_data.ptrace.tracer_tgid = current->tgid; in proc_ptrace_connector()
212 ev->event_data.ptrace.tracer_pid = 0; in proc_ptrace_connector()
213 ev->event_data.ptrace.tracer_tgid = 0; in proc_ptrace_connector()
219 msg->len = sizeof(*ev); in proc_ptrace_connector()
227 struct proc_event *ev; in proc_comm_connector() local
234 ev = (struct proc_event *)msg->data; in proc_comm_connector()
235 memset(&ev->event_data, 0, sizeof(ev->event_data)); in proc_comm_connector()
236 ev->timestamp_ns = ktime_get_ns(); in proc_comm_connector()
237 ev->what = PROC_EVENT_COMM; in proc_comm_connector()
238 ev->event_data.comm.process_pid = task->pid; in proc_comm_connector()
239 ev->event_data.comm.process_tgid = task->tgid; in proc_comm_connector()
240 get_task_comm(ev->event_data.comm.comm, task); in proc_comm_connector()
244 msg->len = sizeof(*ev); in proc_comm_connector()
252 struct proc_event *ev; in proc_coredump_connector() local
259 ev = (struct proc_event *)msg->data; in proc_coredump_connector()
260 memset(&ev->event_data, 0, sizeof(ev->event_data)); in proc_coredump_connector()
261 ev->timestamp_ns = ktime_get_ns(); in proc_coredump_connector()
262 ev->what = PROC_EVENT_COREDUMP; in proc_coredump_connector()
263 ev->event_data.coredump.process_pid = task->pid; in proc_coredump_connector()
264 ev->event_data.coredump.process_tgid = task->tgid; in proc_coredump_connector()
265 ev->event_data.coredump.parent_pid = task->real_parent->pid; in proc_coredump_connector()
266 ev->event_data.coredump.parent_tgid = task->real_parent->tgid; in proc_coredump_connector()
270 msg->len = sizeof(*ev); in proc_coredump_connector()
278 struct proc_event *ev; in proc_exit_connector() local
285 ev = (struct proc_event *)msg->data; in proc_exit_connector()
286 memset(&ev->event_data, 0, sizeof(ev->event_data)); in proc_exit_connector()
287 ev->timestamp_ns = ktime_get_ns(); in proc_exit_connector()
288 ev->what = PROC_EVENT_EXIT; in proc_exit_connector()
289 ev->event_data.exit.process_pid = task->pid; in proc_exit_connector()
290 ev->event_data.exit.process_tgid = task->tgid; in proc_exit_connector()
291 ev->event_data.exit.exit_code = task->exit_code; in proc_exit_connector()
292 ev->event_data.exit.exit_signal = task->exit_signal; in proc_exit_connector()
293 ev->event_data.exit.parent_pid = task->real_parent->pid; in proc_exit_connector()
294 ev->event_data.exit.parent_tgid = task->real_parent->tgid; in proc_exit_connector()
298 msg->len = sizeof(*ev); in proc_exit_connector()
314 struct proc_event *ev; in cn_proc_ack() local
321 ev = (struct proc_event *)msg->data; in cn_proc_ack()
322 memset(&ev->event_data, 0, sizeof(ev->event_data)); in cn_proc_ack()
324 ev->timestamp_ns = ktime_get_ns(); in cn_proc_ack()
325 ev->cpu = -1; in cn_proc_ack()
326 ev->what = PROC_EVENT_NONE; in cn_proc_ack()
327 ev->event_data.ack.err = err; in cn_proc_ack()
330 msg->len = sizeof(*ev); in cn_proc_ack()