BSM_GETAUDIT
case BSM_GETAUDIT: s = "BSM_GETAUDIT"; break;
return (syscall(SYS_auditsys, BSM_GETAUDIT, ai));
case BSM_GETAUDIT: