The text befa71f3cd6c, as Debian 7 (Wheezy) shipped it.
log a user command
audit_log_user_command(3) on Linux now