Lines Matching defs:audit_context
98 struct audit_context { struct
99 int dummy; /* must be the first element */
100 int in_syscall; /* 1 if task is in a syscall */
101 enum audit_state state, current_state;
102 unsigned int serial; /* serial number for record */
103 int major; /* syscall number */
104 struct timespec64 ctime; /* time of syscall entry */
105 unsigned long argv[4]; /* syscall arguments */
106 long return_code;/* syscall return code */
107 u64 prio;
108 int return_valid; /* return code is valid */
117 struct audit_names preallocated_names[AUDIT_NAMES];
118 int name_count; /* total records in names_list */
119 struct list_head names_list; /* struct audit_names->list anchor */
120 char *filterkey; /* key for rule that triggered record */
121 struct path pwd;
122 struct audit_aux_data *aux;
123 struct audit_aux_data *aux_pids;
124 struct sockaddr_storage *sockaddr;
125 size_t sockaddr_len;
127 pid_t pid, ppid;
128 kuid_t uid, euid, suid, fsuid;
129 kgid_t gid, egid, sgid, fsgid;
130 unsigned long personality;
131 int arch;
133 pid_t target_pid;
134 kuid_t target_auid;
135 kuid_t target_uid;
136 unsigned int target_sessionid;
137 u32 target_sid;
138 char target_comm[TASK_COMM_LEN];
140 struct audit_tree_refs *trees, *first_trees;
141 struct list_head killed_trees;
142 int tree_count;
144 int type;
145 union {
195 int fds[2];
196 struct audit_proctitle proctitle;