| name: selinux_audited |
| ID: 584 |
| format: |
| field:unsigned short common_type; offset:0; size:2; signed:0; |
| field:unsigned char common_flags; offset:2; size:1; signed:0; |
| field:unsigned char common_preempt_count; offset:3; size:1; signed:0; |
| field:int common_pid; offset:4; size:4; signed:1; |
| |
| field:u32 requested; offset:8; size:4; signed:0; |
| field:u32 denied; offset:12; size:4; signed:0; |
| field:u32 audited; offset:16; size:4; signed:0; |
| field:int result; offset:20; size:4; signed:1; |
| field:__data_loc char[] scontext; offset:24; size:4; signed:0; |
| field:__data_loc char[] tcontext; offset:28; size:4; signed:0; |
| field:__data_loc char[] tclass; offset:32; size:4; signed:0; |
| |
| print fmt: "requested=0x%x denied=0x%x audited=0x%x result=%d scontext=%s tcontext=%s tclass=%s", REC->requested, REC->denied, REC->audited, REC->result, __get_str(scontext), __get_str(tcontext), __get_str(tclass) |
