Store information about the arguments to the capset syscall
void __audit_log_capset(const struct cred * new, const struct cred * old);
new
the new credentials
old
the old (current) credentials
Record the aguments userspace sent to sys_capset for later printing by the audit system if applicable