CAP_AUDIT_READ    370 include/uapi/linux/capability.h #define CAP_LAST_CAP         CAP_AUDIT_READ
CAP_AUDIT_READ   1530 kernel/audit.c 	if (!capable(CAP_AUDIT_READ))
CAP_AUDIT_READ     32 security/selinux/include/classmap.h #if CAP_LAST_CAP > CAP_AUDIT_READ