audit_open(3) on Linux

The text f709dc7e1acf, as Debian 11 (Bullseye), Debian 10 (Buster), Debian 9 (Stretch), Debian 8 (Jessie) shipped it.

Open a audit netlink socket connection