AUDIT_ALWAYS 375 kernel/auditfilter.c if (rule->action != AUDIT_NEVER && rule->action != AUDIT_ALWAYS) AUDIT_ALWAYS 1725 kernel/auditfilter.c case AUDIT_ALWAYS: *state = AUDIT_RECORD_CONTEXT; break; AUDIT_ALWAYS 625 kernel/auditsc.c case AUDIT_ALWAYS: *state = AUDIT_RECORD_CONTEXT; break;