Lines Matching refs:ab
981 struct audit_buffer *ab; in audit_log_pid_context() local
986 ab = audit_log_start(context, GFP_KERNEL, AUDIT_OBJ_PID); in audit_log_pid_context()
987 if (!ab) in audit_log_pid_context()
990 audit_log_format(ab, "opid=%d oauid=%d ouid=%d oses=%d", pid, in audit_log_pid_context()
995 audit_log_format(ab, " obj=(none)"); in audit_log_pid_context()
998 audit_log_format(ab, " obj=%s", ctx); in audit_log_pid_context()
1002 audit_log_format(ab, " ocomm="); in audit_log_pid_context()
1003 audit_log_untrustedstring(ab, comm); in audit_log_pid_context()
1004 audit_log_end(ab); in audit_log_pid_context()
1010 struct audit_buffer **ab) in audit_log_execve_info() argument
1046 audit_log_format(*ab, "argc=%d", context->execve.argc); in audit_log_execve_info()
1117 audit_log_end(*ab); in audit_log_execve_info()
1118 *ab = audit_log_start(context, in audit_log_execve_info()
1120 if (!*ab) in audit_log_execve_info()
1145 audit_log_format(*ab, "%s", abuf); in audit_log_execve_info()
1151 audit_log_n_hex(*ab, buf, len_tmp); in audit_log_execve_info()
1157 audit_log_n_string(*ab, buf, len_tmp); in audit_log_execve_info()
1185 struct audit_buffer *ab; in show_special() local
1188 ab = audit_log_start(context, GFP_KERNEL, context->type); in show_special()
1189 if (!ab) in show_special()
1195 audit_log_format(ab, "nargs=%d", nargs); in show_special()
1197 audit_log_format(ab, " a%d=%lx", i, in show_special()
1203 audit_log_format(ab, "ouid=%u ogid=%u mode=%#ho", in show_special()
1211 audit_log_format(ab, " osid=%u", osid); in show_special()
1214 audit_log_format(ab, " obj=%s", ctx); in show_special()
1219 audit_log_end(ab); in show_special()
1220 ab = audit_log_start(context, GFP_KERNEL, in show_special()
1222 if (unlikely(!ab)) in show_special()
1224 audit_log_format(ab, in show_special()
1233 audit_log_format(ab, in show_special()
1243 audit_log_format(ab, in show_special()
1253 audit_log_format(ab, "mqdes=%d sigev_signo=%d", in show_special()
1259 audit_log_format(ab, in show_special()
1267 audit_log_format(ab, "pid=%d", context->capset.pid); in show_special()
1268 audit_log_cap(ab, "cap_pi", &context->capset.cap.inheritable); in show_special()
1269 audit_log_cap(ab, "cap_pp", &context->capset.cap.permitted); in show_special()
1270 audit_log_cap(ab, "cap_pe", &context->capset.cap.effective); in show_special()
1271 audit_log_cap(ab, "cap_pa", &context->capset.cap.ambient); in show_special()
1274 audit_log_format(ab, "fd=%d flags=0x%x", context->mmap.fd, in show_special()
1278 audit_log_execve_info(context, &ab); in show_special()
1281 audit_log_format(ab, "name="); in show_special()
1283 audit_log_untrustedstring(ab, context->module.name); in show_special()
1286 audit_log_format(ab, "(null)"); in show_special()
1290 audit_log_end(ab); in show_special()
1312 struct audit_buffer *ab; in audit_log_proctitle() local
1314 ab = audit_log_start(context, GFP_KERNEL, AUDIT_PROCTITLE); in audit_log_proctitle()
1315 if (!ab) in audit_log_proctitle()
1318 audit_log_format(ab, "proctitle="); in audit_log_proctitle()
1342 audit_log_n_untrustedstring(ab, msg, len); in audit_log_proctitle()
1343 audit_log_end(ab); in audit_log_proctitle()
1349 struct audit_buffer *ab; in audit_log_exit() local
1356 ab = audit_log_start(context, GFP_KERNEL, AUDIT_SYSCALL); in audit_log_exit()
1357 if (!ab) in audit_log_exit()
1359 audit_log_format(ab, "arch=%x syscall=%d", in audit_log_exit()
1362 audit_log_format(ab, " per=%lx", context->personality); in audit_log_exit()
1364 audit_log_format(ab, " success=%s exit=%ld", in audit_log_exit()
1368 audit_log_format(ab, in audit_log_exit()
1376 audit_log_task_info(ab, tsk); in audit_log_exit()
1377 audit_log_key(ab, context->filterkey); in audit_log_exit()
1378 audit_log_end(ab); in audit_log_exit()
1382 ab = audit_log_start(context, GFP_KERNEL, aux->type); in audit_log_exit()
1383 if (!ab) in audit_log_exit()
1390 audit_log_format(ab, "fver=%x", axs->fcap_ver); in audit_log_exit()
1391 audit_log_cap(ab, "fp", &axs->fcap.permitted); in audit_log_exit()
1392 audit_log_cap(ab, "fi", &axs->fcap.inheritable); in audit_log_exit()
1393 audit_log_format(ab, " fe=%d", axs->fcap.fE); in audit_log_exit()
1394 audit_log_cap(ab, "old_pp", &axs->old_pcap.permitted); in audit_log_exit()
1395 audit_log_cap(ab, "old_pi", &axs->old_pcap.inheritable); in audit_log_exit()
1396 audit_log_cap(ab, "old_pe", &axs->old_pcap.effective); in audit_log_exit()
1397 audit_log_cap(ab, "old_pa", &axs->old_pcap.ambient); in audit_log_exit()
1398 audit_log_cap(ab, "pp", &axs->new_pcap.permitted); in audit_log_exit()
1399 audit_log_cap(ab, "pi", &axs->new_pcap.inheritable); in audit_log_exit()
1400 audit_log_cap(ab, "pe", &axs->new_pcap.effective); in audit_log_exit()
1401 audit_log_cap(ab, "pa", &axs->new_pcap.ambient); in audit_log_exit()
1405 audit_log_end(ab); in audit_log_exit()
1412 ab = audit_log_start(context, GFP_KERNEL, AUDIT_FD_PAIR); in audit_log_exit()
1413 if (ab) { in audit_log_exit()
1414 audit_log_format(ab, "fd0=%d fd1=%d", in audit_log_exit()
1416 audit_log_end(ab); in audit_log_exit()
1421 ab = audit_log_start(context, GFP_KERNEL, AUDIT_SOCKADDR); in audit_log_exit()
1422 if (ab) { in audit_log_exit()
1423 audit_log_format(ab, "saddr="); in audit_log_exit()
1424 audit_log_n_hex(ab, (void *)context->sockaddr, in audit_log_exit()
1426 audit_log_end(ab); in audit_log_exit()
1451 ab = audit_log_start(context, GFP_KERNEL, AUDIT_CWD); in audit_log_exit()
1452 if (ab) { in audit_log_exit()
1453 audit_log_d_path(ab, "cwd=", &context->pwd); in audit_log_exit()
1454 audit_log_end(ab); in audit_log_exit()
1468 ab = audit_log_start(context, GFP_KERNEL, AUDIT_EOE); in audit_log_exit()
1469 if (ab) in audit_log_exit()
1470 audit_log_end(ab); in audit_log_exit()
2024 struct audit_buffer *ab; in audit_log_set_loginuid() local
2031 ab = audit_log_start(NULL, GFP_KERNEL, AUDIT_LOGIN); in audit_log_set_loginuid()
2032 if (!ab) in audit_log_set_loginuid()
2040 audit_log_format(ab, "pid=%d uid=%u", task_tgid_nr(current), uid); in audit_log_set_loginuid()
2041 audit_log_task_context(ab); in audit_log_set_loginuid()
2042 audit_log_format(ab, " old-auid=%u auid=%u tty=%s old-ses=%u ses=%u res=%d", in audit_log_set_loginuid()
2046 audit_log_end(ab); in audit_log_set_loginuid()
2430 static void audit_log_task(struct audit_buffer *ab) in audit_log_task() argument
2441 audit_log_format(ab, "auid=%u uid=%u gid=%u ses=%u", in audit_log_task()
2446 audit_log_task_context(ab); in audit_log_task()
2447 audit_log_format(ab, " pid=%d comm=", task_tgid_nr(current)); in audit_log_task()
2448 audit_log_untrustedstring(ab, get_task_comm(comm, current)); in audit_log_task()
2449 audit_log_d_path_exe(ab, current->mm); in audit_log_task()
2461 struct audit_buffer *ab; in audit_core_dumps() local
2469 ab = audit_log_start(audit_context(), GFP_KERNEL, AUDIT_ANOM_ABEND); in audit_core_dumps()
2470 if (unlikely(!ab)) in audit_core_dumps()
2472 audit_log_task(ab); in audit_core_dumps()
2473 audit_log_format(ab, " sig=%ld res=1", signr); in audit_core_dumps()
2474 audit_log_end(ab); in audit_core_dumps()
2491 struct audit_buffer *ab; in audit_seccomp() local
2493 ab = audit_log_start(audit_context(), GFP_KERNEL, AUDIT_SECCOMP); in audit_seccomp()
2494 if (unlikely(!ab)) in audit_seccomp()
2496 audit_log_task(ab); in audit_seccomp()
2497 audit_log_format(ab, " sig=%ld arch=%x syscall=%ld compat=%d ip=0x%lx code=0x%x", in audit_seccomp()
2500 audit_log_end(ab); in audit_seccomp()
2506 struct audit_buffer *ab; in audit_seccomp_actions_logged() local
2511 ab = audit_log_start(audit_context(), GFP_KERNEL, in audit_seccomp_actions_logged()
2513 if (unlikely(!ab)) in audit_seccomp_actions_logged()
2516 audit_log_format(ab, "op=seccomp-logging"); in audit_seccomp_actions_logged()
2517 audit_log_format(ab, " actions=%s", names); in audit_seccomp_actions_logged()
2518 audit_log_format(ab, " old-actions=%s", old_names); in audit_seccomp_actions_logged()
2519 audit_log_format(ab, " res=%d", res); in audit_seccomp_actions_logged()
2520 audit_log_end(ab); in audit_seccomp_actions_logged()