Lines Matching refs:ev
72 struct proc_event *ev; in proc_fork_connector() local
80 ev = (struct proc_event *)msg->data; in proc_fork_connector()
81 memset(&ev->event_data, 0, sizeof(ev->event_data)); in proc_fork_connector()
82 ev->timestamp_ns = ktime_get_ns(); in proc_fork_connector()
83 ev->what = PROC_EVENT_FORK; in proc_fork_connector()
86 ev->event_data.fork.parent_pid = parent->pid; in proc_fork_connector()
87 ev->event_data.fork.parent_tgid = parent->tgid; in proc_fork_connector()
89 ev->event_data.fork.child_pid = task->pid; in proc_fork_connector()
90 ev->event_data.fork.child_tgid = task->tgid; in proc_fork_connector()
94 msg->len = sizeof(*ev); in proc_fork_connector()
102 struct proc_event *ev; in proc_exec_connector() local
109 ev = (struct proc_event *)msg->data; in proc_exec_connector()
110 memset(&ev->event_data, 0, sizeof(ev->event_data)); in proc_exec_connector()
111 ev->timestamp_ns = ktime_get_ns(); in proc_exec_connector()
112 ev->what = PROC_EVENT_EXEC; in proc_exec_connector()
113 ev->event_data.exec.process_pid = task->pid; in proc_exec_connector()
114 ev->event_data.exec.process_tgid = task->tgid; in proc_exec_connector()
118 msg->len = sizeof(*ev); in proc_exec_connector()
126 struct proc_event *ev; in proc_id_connector() local
134 ev = (struct proc_event *)msg->data; in proc_id_connector()
135 memset(&ev->event_data, 0, sizeof(ev->event_data)); in proc_id_connector()
136 ev->what = which_id; in proc_id_connector()
137 ev->event_data.id.process_pid = task->pid; in proc_id_connector()
138 ev->event_data.id.process_tgid = task->tgid; in proc_id_connector()
142 ev->event_data.id.r.ruid = from_kuid_munged(&init_user_ns, cred->uid); in proc_id_connector()
143 ev->event_data.id.e.euid = from_kuid_munged(&init_user_ns, cred->euid); in proc_id_connector()
145 ev->event_data.id.r.rgid = from_kgid_munged(&init_user_ns, cred->gid); in proc_id_connector()
146 ev->event_data.id.e.egid = from_kgid_munged(&init_user_ns, cred->egid); in proc_id_connector()
152 ev->timestamp_ns = ktime_get_ns(); in proc_id_connector()
156 msg->len = sizeof(*ev); in proc_id_connector()
164 struct proc_event *ev; in proc_sid_connector() local
171 ev = (struct proc_event *)msg->data; in proc_sid_connector()
172 memset(&ev->event_data, 0, sizeof(ev->event_data)); in proc_sid_connector()
173 ev->timestamp_ns = ktime_get_ns(); in proc_sid_connector()
174 ev->what = PROC_EVENT_SID; in proc_sid_connector()
175 ev->event_data.sid.process_pid = task->pid; in proc_sid_connector()
176 ev->event_data.sid.process_tgid = task->tgid; in proc_sid_connector()
180 msg->len = sizeof(*ev); in proc_sid_connector()
188 struct proc_event *ev; in proc_ptrace_connector() local
195 ev = (struct proc_event *)msg->data; in proc_ptrace_connector()
196 memset(&ev->event_data, 0, sizeof(ev->event_data)); in proc_ptrace_connector()
197 ev->timestamp_ns = ktime_get_ns(); in proc_ptrace_connector()
198 ev->what = PROC_EVENT_PTRACE; in proc_ptrace_connector()
199 ev->event_data.ptrace.process_pid = task->pid; in proc_ptrace_connector()
200 ev->event_data.ptrace.process_tgid = task->tgid; in proc_ptrace_connector()
202 ev->event_data.ptrace.tracer_pid = current->pid; in proc_ptrace_connector()
203 ev->event_data.ptrace.tracer_tgid = current->tgid; in proc_ptrace_connector()
205 ev->event_data.ptrace.tracer_pid = 0; in proc_ptrace_connector()
206 ev->event_data.ptrace.tracer_tgid = 0; in proc_ptrace_connector()
212 msg->len = sizeof(*ev); in proc_ptrace_connector()
220 struct proc_event *ev; in proc_comm_connector() local
227 ev = (struct proc_event *)msg->data; in proc_comm_connector()
228 memset(&ev->event_data, 0, sizeof(ev->event_data)); in proc_comm_connector()
229 ev->timestamp_ns = ktime_get_ns(); in proc_comm_connector()
230 ev->what = PROC_EVENT_COMM; in proc_comm_connector()
231 ev->event_data.comm.process_pid = task->pid; in proc_comm_connector()
232 ev->event_data.comm.process_tgid = task->tgid; in proc_comm_connector()
233 get_task_comm(ev->event_data.comm.comm, task); in proc_comm_connector()
237 msg->len = sizeof(*ev); in proc_comm_connector()
245 struct proc_event *ev; in proc_coredump_connector() local
253 ev = (struct proc_event *)msg->data; in proc_coredump_connector()
254 memset(&ev->event_data, 0, sizeof(ev->event_data)); in proc_coredump_connector()
255 ev->timestamp_ns = ktime_get_ns(); in proc_coredump_connector()
256 ev->what = PROC_EVENT_COREDUMP; in proc_coredump_connector()
257 ev->event_data.coredump.process_pid = task->pid; in proc_coredump_connector()
258 ev->event_data.coredump.process_tgid = task->tgid; in proc_coredump_connector()
263 ev->event_data.coredump.parent_pid = parent->pid; in proc_coredump_connector()
264 ev->event_data.coredump.parent_tgid = parent->tgid; in proc_coredump_connector()
270 msg->len = sizeof(*ev); in proc_coredump_connector()
278 struct proc_event *ev; in proc_exit_connector() local
286 ev = (struct proc_event *)msg->data; in proc_exit_connector()
287 memset(&ev->event_data, 0, sizeof(ev->event_data)); in proc_exit_connector()
288 ev->timestamp_ns = ktime_get_ns(); in proc_exit_connector()
289 ev->what = PROC_EVENT_EXIT; in proc_exit_connector()
290 ev->event_data.exit.process_pid = task->pid; in proc_exit_connector()
291 ev->event_data.exit.process_tgid = task->tgid; in proc_exit_connector()
292 ev->event_data.exit.exit_code = task->exit_code; in proc_exit_connector()
293 ev->event_data.exit.exit_signal = task->exit_signal; in proc_exit_connector()
298 ev->event_data.exit.parent_pid = parent->pid; in proc_exit_connector()
299 ev->event_data.exit.parent_tgid = parent->tgid; in proc_exit_connector()
305 msg->len = sizeof(*ev); in proc_exit_connector()
321 struct proc_event *ev; in cn_proc_ack() local
328 ev = (struct proc_event *)msg->data; in cn_proc_ack()
329 memset(&ev->event_data, 0, sizeof(ev->event_data)); in cn_proc_ack()
331 ev->timestamp_ns = ktime_get_ns(); in cn_proc_ack()
332 ev->cpu = -1; in cn_proc_ack()
333 ev->what = PROC_EVENT_NONE; in cn_proc_ack()
334 ev->event_data.ack.err = err; in cn_proc_ack()
337 msg->len = sizeof(*ev); in cn_proc_ack()