Lines Matching defs:audit_context
107 struct audit_context { struct
108 int dummy; /* must be the first element */
109 int in_syscall; /* 1 if task is in a syscall */
110 enum audit_state state, current_state;
111 unsigned int serial; /* serial number for record */
112 int major; /* syscall number */
113 struct timespec ctime; /* time of syscall entry */
114 unsigned long argv[4]; /* syscall arguments */
115 long return_code;/* syscall return code */
116 u64 prio;
117 int return_valid; /* return code is valid */
126 struct audit_names preallocated_names[AUDIT_NAMES];
127 int name_count; /* total records in names_list */
128 struct list_head names_list; /* struct audit_names->list anchor */
129 char *filterkey; /* key for rule that triggered record */
130 struct path pwd;
131 struct audit_aux_data *aux;
132 struct audit_aux_data *aux_pids;
133 struct sockaddr_storage *sockaddr;
134 size_t sockaddr_len;
136 pid_t pid, ppid;
137 kuid_t uid, euid, suid, fsuid;
138 kgid_t gid, egid, sgid, fsgid;
139 unsigned long personality;
140 int arch;
142 pid_t target_pid;
143 kuid_t target_auid;
144 kuid_t target_uid;
145 unsigned int target_sessionid;
146 u32 target_sid;
147 char target_comm[TASK_COMM_LEN];
149 struct audit_tree_refs *trees, *first_trees;
150 struct list_head killed_trees;
151 int tree_count;
153 int type;
154 union {
212 extern void audit_log_name(struct audit_context *context, argument