···11+#include <asm-generic/audit_dir_write.h>22+__NR_acct,33+__NR_swapon,44+__NR_quotactl,55+__NR_truncate,66+#ifdef __NR_truncate6477+__NR_truncate64,88+#endif99+#ifdef __NR_bind1010+__NR_bind, /* bind can affect fs object only in one way... */1111+#endif
+4
include/linux/audit.h
···132132#define AUDIT_CLASS_DIR_WRITE_32 1133133#define AUDIT_CLASS_CHATTR 2134134#define AUDIT_CLASS_CHATTR_32 3135135+#define AUDIT_CLASS_READ 4136136+#define AUDIT_CLASS_READ_32 5137137+#define AUDIT_CLASS_WRITE 6138138+#define AUDIT_CLASS_WRITE_32 7135139136140/* This bitmask is used to validate user input. It represents all bits that137141 * are currently used in an audit field constant understood by the kernel.