Lines Matching full:audit

26     ./capable -v          # verbose: include non-audit checks
40     help="include non-audit checks")
125    int audit;
165     int audit;
169     audit = (cap_opt & 0b10) == 0;
172     audit = cap_opt;
192     data.audit = audit;
232     bpf_text = bpf_text.replace('FILTER2', 'if (audit == 0) { return 0; }')
255         "TIME", "UID", "PID", "TID", "COMM", "CAP", "NAME", "AUDIT", "INSETID"))
258         "TIME", "UID", "PID", "COMM", "CAP", "NAME", "AUDIT"))
285             event.cap, name, event.audit, str(event.insetid) if event.insetid != -1 else "N/A"))
289             event.cap, name, event.audit))