Lines Matching defs:audit_context
103 struct audit_context { struct
106 AUDIT_CTX_UNUSED, /* audit_context is currently unused */ argument
109 } context;
110 enum audit_state state, current_state;
111 unsigned int serial; /* serial number for record */
112 int major; /* syscall number */
113 int uring_op; /* uring operation */
114 struct timespec64 ctime; /* time of syscall entry */
115 unsigned long argv[4]; /* syscall arguments */
116 long return_code;/* syscall return code */
117 u64 prio;
118 int return_valid; /* return code is valid */
127 struct audit_names preallocated_names[AUDIT_NAMES];
128 int name_count; /* total records in names_list */
129 struct list_head names_list; /* struct audit_names->list anchor */
130 char *filterkey; /* key for rule that triggered record */
131 struct path pwd;
132 struct audit_aux_data *aux;
133 struct audit_aux_data *aux_pids;
134 struct sockaddr_storage *sockaddr;
135 size_t sockaddr_len;
137 pid_t ppid;
138 kuid_t uid, euid, suid, fsuid;
139 kgid_t gid, egid, sgid, fsgid;
140 unsigned long personality;
141 int arch;
143 pid_t target_pid;
144 kuid_t target_auid;
145 kuid_t target_uid;
146 unsigned int target_sessionid;
147 struct lsm_prop target_ref;
148 char target_comm[TASK_COMM_LEN];
150 struct audit_tree_refs *trees, *first_trees;
151 struct list_head killed_trees;
152 int tree_count;
154 int type;
155 union {
210 int fds[2];
211 struct audit_proctitle proctitle;