65 	struct proc_event *ev;  in proc_fork_connector()  local
73 	ev = (struct proc_event *)msg->data;  in proc_fork_connector()
74 	memset(&ev->event_data, 0, sizeof(ev->event_data));  in proc_fork_connector()
75 	ev->timestamp_ns = ktime_get_ns();  in proc_fork_connector()
76 	ev->what = PROC_EVENT_FORK;  in proc_fork_connector()
79 	ev->event_data.fork.parent_pid = parent->pid;  in proc_fork_connector()
80 	ev->event_data.fork.parent_tgid = parent->tgid;  in proc_fork_connector()
82 	ev->event_data.fork.child_pid = task->pid;  in proc_fork_connector()
83 	ev->event_data.fork.child_tgid = task->tgid;  in proc_fork_connector()
87 	msg->len = sizeof(*ev);  in proc_fork_connector()
95 	struct proc_event *ev;  in proc_exec_connector()  local
102 	ev = (struct proc_event *)msg->data;  in proc_exec_connector()
103 	memset(&ev->event_data, 0, sizeof(ev->event_data));  in proc_exec_connector()
104 	ev->timestamp_ns = ktime_get_ns();  in proc_exec_connector()
105 	ev->what = PROC_EVENT_EXEC;  in proc_exec_connector()
106 	ev->event_data.exec.process_pid = task->pid;  in proc_exec_connector()
107 	ev->event_data.exec.process_tgid = task->tgid;  in proc_exec_connector()
111 	msg->len = sizeof(*ev);  in proc_exec_connector()
119 	struct proc_event *ev;  in proc_id_connector()  local
127 	ev = (struct proc_event *)msg->data;  in proc_id_connector()
128 	memset(&ev->event_data, 0, sizeof(ev->event_data));  in proc_id_connector()
129 	ev->what = which_id;  in proc_id_connector()
130 	ev->event_data.id.process_pid = task->pid;  in proc_id_connector()
131 	ev->event_data.id.process_tgid = task->tgid;  in proc_id_connector()
135 		ev->event_data.id.r.ruid = from_kuid_munged(&init_user_ns, cred->uid);  in proc_id_connector()
136 		ev->event_data.id.e.euid = from_kuid_munged(&init_user_ns, cred->euid);  in proc_id_connector()
138 		ev->event_data.id.r.rgid = from_kgid_munged(&init_user_ns, cred->gid);  in proc_id_connector()
139 		ev->event_data.id.e.egid = from_kgid_munged(&init_user_ns, cred->egid);  in proc_id_connector()
145 	ev->timestamp_ns = ktime_get_ns();  in proc_id_connector()
149 	msg->len = sizeof(*ev);  in proc_id_connector()
157 	struct proc_event *ev;  in proc_sid_connector()  local
164 	ev = (struct proc_event *)msg->data;  in proc_sid_connector()
165 	memset(&ev->event_data, 0, sizeof(ev->event_data));  in proc_sid_connector()
166 	ev->timestamp_ns = ktime_get_ns();  in proc_sid_connector()
167 	ev->what = PROC_EVENT_SID;  in proc_sid_connector()
168 	ev->event_data.sid.process_pid = task->pid;  in proc_sid_connector()
169 	ev->event_data.sid.process_tgid = task->tgid;  in proc_sid_connector()
173 	msg->len = sizeof(*ev);  in proc_sid_connector()
181 	struct proc_event *ev;  in proc_ptrace_connector()  local
188 	ev = (struct proc_event *)msg->data;  in proc_ptrace_connector()
189 	memset(&ev->event_data, 0, sizeof(ev->event_data));  in proc_ptrace_connector()
190 	ev->timestamp_ns = ktime_get_ns();  in proc_ptrace_connector()
191 	ev->what = PROC_EVENT_PTRACE;  in proc_ptrace_connector()
192 	ev->event_data.ptrace.process_pid  = task->pid;  in proc_ptrace_connector()
193 	ev->event_data.ptrace.process_tgid = task->tgid;  in proc_ptrace_connector()
195 		ev->event_data.ptrace.tracer_pid  = current->pid;  in proc_ptrace_connector()
196 		ev->event_data.ptrace.tracer_tgid = current->tgid;  in proc_ptrace_connector()
198 		ev->event_data.ptrace.tracer_pid  = 0;  in proc_ptrace_connector()
199 		ev->event_data.ptrace.tracer_tgid = 0;  in proc_ptrace_connector()
205 	msg->len = sizeof(*ev);  in proc_ptrace_connector()
213 	struct proc_event *ev;  in proc_comm_connector()  local
220 	ev = (struct proc_event *)msg->data;  in proc_comm_connector()
221 	memset(&ev->event_data, 0, sizeof(ev->event_data));  in proc_comm_connector()
222 	ev->timestamp_ns = ktime_get_ns();  in proc_comm_connector()
223 	ev->what = PROC_EVENT_COMM;  in proc_comm_connector()
224 	ev->event_data.comm.process_pid  = task->pid;  in proc_comm_connector()
225 	ev->event_data.comm.process_tgid = task->tgid;  in proc_comm_connector()
226 	get_task_comm(ev->event_data.comm.comm, task);  in proc_comm_connector()
230 	msg->len = sizeof(*ev);  in proc_comm_connector()
238 	struct proc_event *ev;  in proc_coredump_connector()  local
246 	ev = (struct proc_event *)msg->data;  in proc_coredump_connector()
247 	memset(&ev->event_data, 0, sizeof(ev->event_data));  in proc_coredump_connector()
248 	ev->timestamp_ns = ktime_get_ns();  in proc_coredump_connector()
249 	ev->what = PROC_EVENT_COREDUMP;  in proc_coredump_connector()
250 	ev->event_data.coredump.process_pid = task->pid;  in proc_coredump_connector()
251 	ev->event_data.coredump.process_tgid = task->tgid;  in proc_coredump_connector()
256 		ev->event_data.coredump.parent_pid = parent->pid;  in proc_coredump_connector()
257 		ev->event_data.coredump.parent_tgid = parent->tgid;  in proc_coredump_connector()
263 	msg->len = sizeof(*ev);  in proc_coredump_connector()
271 	struct proc_event *ev;  in proc_exit_connector()  local
279 	ev = (struct proc_event *)msg->data;  in proc_exit_connector()
280 	memset(&ev->event_data, 0, sizeof(ev->event_data));  in proc_exit_connector()
281 	ev->timestamp_ns = ktime_get_ns();  in proc_exit_connector()
282 	ev->what = PROC_EVENT_EXIT;  in proc_exit_connector()
283 	ev->event_data.exit.process_pid = task->pid;  in proc_exit_connector()
284 	ev->event_data.exit.process_tgid = task->tgid;  in proc_exit_connector()
285 	ev->event_data.exit.exit_code = task->exit_code;  in proc_exit_connector()
286 	ev->event_data.exit.exit_signal = task->exit_signal;  in proc_exit_connector()
291 		ev->event_data.exit.parent_pid = parent->pid;  in proc_exit_connector()
292 		ev->event_data.exit.parent_tgid = parent->tgid;  in proc_exit_connector()
298 	msg->len = sizeof(*ev);  in proc_exit_connector()
314 	struct proc_event *ev;  in cn_proc_ack()  local
321 	ev = (struct proc_event *)msg->data;  in cn_proc_ack()
322 	memset(&ev->event_data, 0, sizeof(ev->event_data));  in cn_proc_ack()
324 	ev->timestamp_ns = ktime_get_ns();  in cn_proc_ack()
325 	ev->cpu = -1;  in cn_proc_ack()
326 	ev->what = PROC_EVENT_NONE;  in cn_proc_ack()
327 	ev->event_data.ack.err = err;  in cn_proc_ack()
330 	msg->len = sizeof(*ev);  in cn_proc_ack()