audit_update_watch 1837 kernel/auditfilter.c audit_update_watch(parent, dname, inode->i_sb->s_dev, audit_update_watch 1840 kernel/auditfilter.c audit_update_watch(parent, dname, (dev_t)-1, (unsigned long)-1, 1);