The text c5227c13a63c, as Debian 5.0 (Lenny) shipped it.
fill in an audit record at syscall entry
audit_syscall_entry(9) on Linux now