120 	struct proc_event *ev;  in proc_fork_connector()  local
128 	ev = (struct proc_event *)msg->data;  in proc_fork_connector()
129 	memset(&ev->event_data, 0, sizeof(ev->event_data));  in proc_fork_connector()
130 	ev->timestamp_ns = ktime_get_ns();  in proc_fork_connector()
131 	ev->what = PROC_EVENT_FORK;  in proc_fork_connector()
134 	ev->event_data.fork.parent_pid = parent->pid;  in proc_fork_connector()
135 	ev->event_data.fork.parent_tgid = parent->tgid;  in proc_fork_connector()
137 	ev->event_data.fork.child_pid = task->pid;  in proc_fork_connector()
138 	ev->event_data.fork.child_tgid = task->tgid;  in proc_fork_connector()
142 	msg->len = sizeof(*ev);  in proc_fork_connector()
150 	struct proc_event *ev;  in proc_exec_connector()  local
157 	ev = (struct proc_event *)msg->data;  in proc_exec_connector()
158 	memset(&ev->event_data, 0, sizeof(ev->event_data));  in proc_exec_connector()
159 	ev->timestamp_ns = ktime_get_ns();  in proc_exec_connector()
160 	ev->what = PROC_EVENT_EXEC;  in proc_exec_connector()
161 	ev->event_data.exec.process_pid = task->pid;  in proc_exec_connector()
162 	ev->event_data.exec.process_tgid = task->tgid;  in proc_exec_connector()
166 	msg->len = sizeof(*ev);  in proc_exec_connector()
174 	struct proc_event *ev;  in proc_id_connector()  local
182 	ev = (struct proc_event *)msg->data;  in proc_id_connector()
183 	memset(&ev->event_data, 0, sizeof(ev->event_data));  in proc_id_connector()
184 	ev->what = which_id;  in proc_id_connector()
185 	ev->event_data.id.process_pid = task->pid;  in proc_id_connector()
186 	ev->event_data.id.process_tgid = task->tgid;  in proc_id_connector()
190 		ev->event_data.id.r.ruid = from_kuid_munged(&init_user_ns, cred->uid);  in proc_id_connector()
191 		ev->event_data.id.e.euid = from_kuid_munged(&init_user_ns, cred->euid);  in proc_id_connector()
193 		ev->event_data.id.r.rgid = from_kgid_munged(&init_user_ns, cred->gid);  in proc_id_connector()
194 		ev->event_data.id.e.egid = from_kgid_munged(&init_user_ns, cred->egid);  in proc_id_connector()
200 	ev->timestamp_ns = ktime_get_ns();  in proc_id_connector()
204 	msg->len = sizeof(*ev);  in proc_id_connector()
212 	struct proc_event *ev;  in proc_sid_connector()  local
219 	ev = (struct proc_event *)msg->data;  in proc_sid_connector()
220 	memset(&ev->event_data, 0, sizeof(ev->event_data));  in proc_sid_connector()
221 	ev->timestamp_ns = ktime_get_ns();  in proc_sid_connector()
222 	ev->what = PROC_EVENT_SID;  in proc_sid_connector()
223 	ev->event_data.sid.process_pid = task->pid;  in proc_sid_connector()
224 	ev->event_data.sid.process_tgid = task->tgid;  in proc_sid_connector()
228 	msg->len = sizeof(*ev);  in proc_sid_connector()
236 	struct proc_event *ev;  in proc_ptrace_connector()  local
243 	ev = (struct proc_event *)msg->data;  in proc_ptrace_connector()
244 	memset(&ev->event_data, 0, sizeof(ev->event_data));  in proc_ptrace_connector()
245 	ev->timestamp_ns = ktime_get_ns();  in proc_ptrace_connector()
246 	ev->what = PROC_EVENT_PTRACE;  in proc_ptrace_connector()
247 	ev->event_data.ptrace.process_pid  = task->pid;  in proc_ptrace_connector()
248 	ev->event_data.ptrace.process_tgid = task->tgid;  in proc_ptrace_connector()
250 		ev->event_data.ptrace.tracer_pid  = current->pid;  in proc_ptrace_connector()
251 		ev->event_data.ptrace.tracer_tgid = current->tgid;  in proc_ptrace_connector()
253 		ev->event_data.ptrace.tracer_pid  = 0;  in proc_ptrace_connector()
254 		ev->event_data.ptrace.tracer_tgid = 0;  in proc_ptrace_connector()
260 	msg->len = sizeof(*ev);  in proc_ptrace_connector()
268 	struct proc_event *ev;  in proc_comm_connector()  local
275 	ev = (struct proc_event *)msg->data;  in proc_comm_connector()
276 	memset(&ev->event_data, 0, sizeof(ev->event_data));  in proc_comm_connector()
277 	ev->timestamp_ns = ktime_get_ns();  in proc_comm_connector()
278 	ev->what = PROC_EVENT_COMM;  in proc_comm_connector()
279 	ev->event_data.comm.process_pid  = task->pid;  in proc_comm_connector()
280 	ev->event_data.comm.process_tgid = task->tgid;  in proc_comm_connector()
281 	get_task_comm(ev->event_data.comm.comm, task);  in proc_comm_connector()
285 	msg->len = sizeof(*ev);  in proc_comm_connector()
293 	struct proc_event *ev;  in proc_coredump_connector()  local
301 	ev = (struct proc_event *)msg->data;  in proc_coredump_connector()
302 	memset(&ev->event_data, 0, sizeof(ev->event_data));  in proc_coredump_connector()
303 	ev->timestamp_ns = ktime_get_ns();  in proc_coredump_connector()
304 	ev->what = PROC_EVENT_COREDUMP;  in proc_coredump_connector()
305 	ev->event_data.coredump.process_pid = task->pid;  in proc_coredump_connector()
306 	ev->event_data.coredump.process_tgid = task->tgid;  in proc_coredump_connector()
311 		ev->event_data.coredump.parent_pid = parent->pid;  in proc_coredump_connector()
312 		ev->event_data.coredump.parent_tgid = parent->tgid;  in proc_coredump_connector()
318 	msg->len = sizeof(*ev);  in proc_coredump_connector()
326 	struct proc_event *ev;  in proc_exit_connector()  local
334 	ev = (struct proc_event *)msg->data;  in proc_exit_connector()
335 	memset(&ev->event_data, 0, sizeof(ev->event_data));  in proc_exit_connector()
336 	ev->timestamp_ns = ktime_get_ns();  in proc_exit_connector()
337 	ev->what = PROC_EVENT_EXIT;  in proc_exit_connector()
338 	ev->event_data.exit.process_pid = task->pid;  in proc_exit_connector()
339 	ev->event_data.exit.process_tgid = task->tgid;  in proc_exit_connector()
340 	ev->event_data.exit.exit_code = task->exit_code;  in proc_exit_connector()
341 	ev->event_data.exit.exit_signal = task->exit_signal;  in proc_exit_connector()
346 		ev->event_data.exit.parent_pid = parent->pid;  in proc_exit_connector()
347 		ev->event_data.exit.parent_tgid = parent->tgid;  in proc_exit_connector()
353 	msg->len = sizeof(*ev);  in proc_exit_connector()
369 	struct proc_event *ev;  in cn_proc_ack()  local
376 	ev = (struct proc_event *)msg->data;  in cn_proc_ack()
377 	memset(&ev->event_data, 0, sizeof(ev->event_data));  in cn_proc_ack()
379 	ev->timestamp_ns = ktime_get_ns();  in cn_proc_ack()
380 	ev->cpu = -1;  in cn_proc_ack()
381 	ev->what = PROC_EVENT_NONE;  in cn_proc_ack()
382 	ev->event_data.ack.err = err;  in cn_proc_ack()
385 	msg->len = sizeof(*ev);  in cn_proc_ack()