CAP_AUDIT_WRITE   874 fs/notify/fanotify/fanotify_user.c 		if (!capable(CAP_AUDIT_WRITE))
CAP_AUDIT_WRITE  1033 kernel/audit.c 		if (!netlink_capable(skb, CAP_AUDIT_WRITE))