auditctl
int auditctl(const char *);
int auditctl(int cmd, caddr_t data, int length);
result = auditctl((int)uap->a1, (caddr_t)uap->a2, (int)uap->a3);