CAP_AUDIT_CONTROL 1065 fs/proc/base.c 	if (!capable(CAP_AUDIT_CONTROL))
CAP_AUDIT_CONTROL  610 kernel/audit.c 		if (security_netlink_recv(skb, CAP_AUDIT_CONTROL))