165 	union auditon_udata udata;  in sys_auditon()  local
185 	memset((void *)&udata, 0, sizeof(udata));  in sys_auditon()
211 		error = copyin(uap->data, (void *)&udata, uap->length);  in sys_auditon()
214 		AUDIT_ARG_AUDITON(&udata);  in sys_auditon()
224 		if (uap->length == sizeof(udata.au_policy64)) {  in sys_auditon()
226 				udata.au_policy64 |= AUDIT_CNT;  in sys_auditon()
228 				udata.au_policy64 |= AUDIT_AHLT;  in sys_auditon()
230 				udata.au_policy64 |= AUDIT_ARGV;  in sys_auditon()
232 				udata.au_policy64 |= AUDIT_ARGE;  in sys_auditon()
235 		if (uap->length != sizeof(udata.au_policy))  in sys_auditon()
238 			udata.au_policy |= AUDIT_CNT;  in sys_auditon()
240 			udata.au_policy |= AUDIT_AHLT;  in sys_auditon()
242 			udata.au_policy |= AUDIT_ARGV;  in sys_auditon()
244 			udata.au_policy |= AUDIT_ARGE;  in sys_auditon()
249 		if (uap->length == sizeof(udata.au_policy64)) {  in sys_auditon()
250 			if (udata.au_policy & ~(AUDIT_CNT|AUDIT_AHLT|  in sys_auditon()
253 			audit_fail_stop = ((udata.au_policy64 & AUDIT_CNT) ==  in sys_auditon()
255 			audit_panic_on_write_fail = (udata.au_policy64 &  in sys_auditon()
257 			audit_argv = (udata.au_policy64 & AUDIT_ARGV);  in sys_auditon()
258 			audit_arge = (udata.au_policy64 & AUDIT_ARGE);  in sys_auditon()
261 		if (uap->length != sizeof(udata.au_policy))  in sys_auditon()
263 		if (udata.au_policy & ~(AUDIT_CNT|AUDIT_AHLT|AUDIT_ARGV|  in sys_auditon()
269 		audit_fail_stop = ((udata.au_policy & AUDIT_CNT) == 0);  in sys_auditon()
270 		audit_panic_on_write_fail = (udata.au_policy & AUDIT_AHLT);  in sys_auditon()
271 		audit_argv = (udata.au_policy & AUDIT_ARGV);  in sys_auditon()
272 		audit_arge = (udata.au_policy & AUDIT_ARGE);  in sys_auditon()
276 		if (uap->length != sizeof(udata.au_mask))  in sys_auditon()
278 		udata.au_mask = audit_nae_mask;  in sys_auditon()
282 		if (uap->length != sizeof(udata.au_mask))  in sys_auditon()
284 		audit_nae_mask = udata.au_mask;  in sys_auditon()
289 		if (uap->length == sizeof(udata.au_qctrl64)) {  in sys_auditon()
290 			udata.au_qctrl64.aq64_hiwater =  in sys_auditon()
292 			udata.au_qctrl64.aq64_lowater =  in sys_auditon()
294 			udata.au_qctrl64.aq64_bufsz =  in sys_auditon()
296 			udata.au_qctrl64.aq64_minfree =  in sys_auditon()
300 		if (uap->length != sizeof(udata.au_qctrl))  in sys_auditon()
302 		udata.au_qctrl = audit_qctrl;  in sys_auditon()
307 		if (uap->length == sizeof(udata.au_qctrl64)) {  in sys_auditon()
309 			if ((udata.au_qctrl64.aq64_hiwater > AQ_MAXHIGH) ||  in sys_auditon()
310 			    (udata.au_qctrl64.aq64_lowater >=  in sys_auditon()
311 			    udata.au_qctrl.aq_hiwater) ||  in sys_auditon()
312 			    (udata.au_qctrl64.aq64_bufsz > AQ_MAXBUFSZ) ||  in sys_auditon()
313 			    (udata.au_qctrl64.aq64_minfree > 100))  in sys_auditon()
316 			    (int)udata.au_qctrl64.aq64_hiwater;  in sys_auditon()
318 			    (int)udata.au_qctrl64.aq64_lowater;  in sys_auditon()
320 			    (int)udata.au_qctrl64.aq64_bufsz;  in sys_auditon()
322 			    (int)udata.au_qctrl64.aq64_minfree;  in sys_auditon()
326 		if (uap->length != sizeof(udata.au_qctrl))  in sys_auditon()
328 		if ((udata.au_qctrl.aq_hiwater > AQ_MAXHIGH) ||  in sys_auditon()
329 		    (udata.au_qctrl.aq_lowater >= udata.au_qctrl.aq_hiwater) ||  in sys_auditon()
330 		    (udata.au_qctrl.aq_bufsz > AQ_MAXBUFSZ) ||  in sys_auditon()
331 		    (udata.au_qctrl.aq_minfree < 0) ||  in sys_auditon()
332 		    (udata.au_qctrl.aq_minfree > 100))  in sys_auditon()
335 		audit_qctrl = udata.au_qctrl;  in sys_auditon()
366 		if (uap->length == sizeof(udata.au_cond64)) {  in sys_auditon()
368 				udata.au_cond64 = AUC_AUDITING;  in sys_auditon()
370 				udata.au_cond64 = AUC_NOAUDIT;  in sys_auditon()
373 		if (uap->length != sizeof(udata.au_cond))  in sys_auditon()
376 			udata.au_cond = AUC_AUDITING;  in sys_auditon()
378 			udata.au_cond = AUC_NOAUDIT;  in sys_auditon()
383 		if (uap->length == sizeof(udata.au_cond64)) {  in sys_auditon()
384 			if (udata.au_cond64 == AUC_NOAUDIT)  in sys_auditon()
386 			if (udata.au_cond64 == AUC_AUDITING)  in sys_auditon()
388 			if (udata.au_cond64 == AUC_DISABLED) {  in sys_auditon()
395 		if (uap->length != sizeof(udata.au_cond))  in sys_auditon()
397 		if (udata.au_cond == AUC_NOAUDIT)  in sys_auditon()
399 		if (udata.au_cond == AUC_AUDITING)  in sys_auditon()
401 		if (udata.au_cond == AUC_DISABLED) {  in sys_auditon()
409 		if (uap->length != sizeof(udata.au_evclass))  in sys_auditon()
411 		udata.au_evclass.ec_class = au_event_class(  in sys_auditon()
412 		    udata.au_evclass.ec_number);  in sys_auditon()
416 		if (uap->length != sizeof(udata.au_evname))  in sys_auditon()
418 		error = au_event_name(udata.au_evname.en_number,  in sys_auditon()
419 		    udata.au_evname.en_name);  in sys_auditon()
425 		if (uap->length != sizeof(udata.au_evclass))  in sys_auditon()
427 		au_evclassmap_insert(udata.au_evclass.ec_number,  in sys_auditon()
428 		    udata.au_evclass.ec_class);  in sys_auditon()
432 		if (uap->length != sizeof(udata.au_evname))  in sys_auditon()
436 		udata.au_evname.en_name[sizeof(udata.au_evname.en_name) - 1]  in sys_auditon()
438 		au_evnamemap_insert(udata.au_evname.en_number,  in sys_auditon()
439 		    udata.au_evname.en_name);  in sys_auditon()
443 		if (uap->length != sizeof(udata.au_aupinfo))  in sys_auditon()
445 		if (udata.au_aupinfo.ap_pid < 1)  in sys_auditon()
447 		if ((tp = pfind(udata.au_aupinfo.ap_pid)) == NULL)  in sys_auditon()
458 		udata.au_aupinfo.ap_auid = cred->cr_audit.ai_auid;  in sys_auditon()
459 		udata.au_aupinfo.ap_mask.am_success =  in sys_auditon()
461 		udata.au_aupinfo.ap_mask.am_failure =  in sys_auditon()
463 		udata.au_aupinfo.ap_termid.machine =  in sys_auditon()
465 		udata.au_aupinfo.ap_termid.port =  in sys_auditon()
467 		udata.au_aupinfo.ap_asid = cred->cr_audit.ai_asid;  in sys_auditon()
472 		if (uap->length != sizeof(udata.au_aupinfo))  in sys_auditon()
474 		if (udata.au_aupinfo.ap_pid < 1)  in sys_auditon()
477 		if ((tp = pfind(udata.au_aupinfo.ap_pid)) == NULL) {  in sys_auditon()
489 		    udata.au_aupinfo.ap_mask.am_success;  in sys_auditon()
491 		    udata.au_aupinfo.ap_mask.am_failure;  in sys_auditon()
498 		if (uap->length != sizeof(udata.au_fstat))  in sys_auditon()
500 		if ((udata.au_fstat.af_filesz != 0) &&  in sys_auditon()
501 		   (udata.au_fstat.af_filesz < MIN_AUDIT_FILE_SIZE))  in sys_auditon()
503 		audit_fstat.af_filesz = udata.au_fstat.af_filesz;  in sys_auditon()
507 		if (uap->length != sizeof(udata.au_fstat))  in sys_auditon()
509 		udata.au_fstat.af_filesz = audit_fstat.af_filesz;  in sys_auditon()
510 		udata.au_fstat.af_currsz = audit_fstat.af_currsz;  in sys_auditon()
514 		if (uap->length != sizeof(udata.au_aupinfo_addr))  in sys_auditon()
516 		if (udata.au_aupinfo_addr.ap_pid < 1)  in sys_auditon()
518 		if ((tp = pfind(udata.au_aupinfo_addr.ap_pid)) == NULL)  in sys_auditon()
521 		udata.au_aupinfo_addr.ap_auid = cred->cr_audit.ai_auid;  in sys_auditon()
522 		udata.au_aupinfo_addr.ap_mask.am_success =  in sys_auditon()
524 		udata.au_aupinfo_addr.ap_mask.am_failure =  in sys_auditon()
526 		udata.au_aupinfo_addr.ap_termid = cred->cr_audit.ai_termid;  in sys_auditon()
527 		udata.au_aupinfo_addr.ap_asid = cred->cr_audit.ai_asid;  in sys_auditon()
532 		if (uap->length != sizeof(udata.au_kau_info))  in sys_auditon()
534 		audit_get_kinfo(&udata.au_kau_info);  in sys_auditon()
538 		if (uap->length != sizeof(udata.au_kau_info))  in sys_auditon()
540 		if (udata.au_kau_info.ai_termid.at_type != AU_IPv4 &&  in sys_auditon()
541 		    udata.au_kau_info.ai_termid.at_type != AU_IPv6)  in sys_auditon()
543 		audit_set_kinfo(&udata.au_kau_info);  in sys_auditon()
547 		if (uap->length != sizeof(udata.au_trigger))  in sys_auditon()
549 		if ((udata.au_trigger < AUDIT_TRIGGER_MIN) ||  in sys_auditon()
550 		    (udata.au_trigger > AUDIT_TRIGGER_MAX))  in sys_auditon()
552 		return (audit_send_trigger(udata.au_trigger));  in sys_auditon()
577 		error = copyout((void *)&udata, uap->data, uap->length);  in sys_auditon()