The text 9b28aaf1494b, as Debian 5.0 (Lenny) shipped it.
store the inode and device from a lookup
__audit_inode(9) on Linux now