audit_flags_and_error_to_openevent
ar->k_ar.ar_event = audit_flags_and_error_to_openevent(
au_event_t audit_flags_and_error_to_openevent(int oflags, int error);