The text 1b21976a2311, as Debian 4.0 (Etch) shipped it.
store the inode and device from a lookup
__audit_inode(9) on Linux now
