endac(3) on FreeBSD
The text 1f97e883b537, as FreeBSD 11.4-RELEASE, FreeBSD 11.3-RELEASE, FreeBSD 11.2-RELEASE, FreeBSD 11.1-RELEASE, FreeBSD 11.0-RELEASE, FreeBSD 10.4-RELEASE, FreeBSD 10.3-RELEASE shipped it.
look up information from the audit_control database