···1+#include <asm-generic/audit_dir_write.h>2+__NR_acct,3+__NR_swapon,4+__NR_quotactl,5+__NR_truncate,6+#ifdef __NR_truncate647+__NR_truncate64,8+#endif9+#ifdef __NR_bind10+__NR_bind, /* bind can affect fs object only in one way... */11+#endif
+4
include/linux/audit.h
···132#define AUDIT_CLASS_DIR_WRITE_32 1133#define AUDIT_CLASS_CHATTR 2134#define AUDIT_CLASS_CHATTR_32 30000135136/* This bitmask is used to validate user input. It represents all bits that137 * are currently used in an audit field constant understood by the kernel.
···132#define AUDIT_CLASS_DIR_WRITE_32 1133#define AUDIT_CLASS_CHATTR 2134#define AUDIT_CLASS_CHATTR_32 3135+#define AUDIT_CLASS_READ 4136+#define AUDIT_CLASS_READ_32 5137+#define AUDIT_CLASS_WRITE 6138+#define AUDIT_CLASS_WRITE_32 7139140/* This bitmask is used to validate user input. It represents all bits that141 * are currently used in an audit field constant understood by the kernel.