The text d0cd8f9ad0a3, as Debian 7 (Wheezy) shipped it.
store the inode and device from a lookup
__audit_inode(9) on Linux now
