audit，审计功能。Linux内核有用日志记录事件的能力，比如记录系统调用和文件访问。然后，管理员可以评审这些日志，确定可能存在的安全裂口，比如失败的登录尝试，或者 用户对系统文件不成功的访问。-Audit, audit function. The ability of Linux kernel useful logging events, such as the record of system call and file access. Then, the administrator can review the log, determines the security breach may exist, such as the failed login attempts, or the user is not successful on the system file access.