audit_set
audit_set(fd, AUDIT_STATUS_ENABLED, 0);
audit_set(fd, AUDIT_STATUS_ENABLED, 1);
audit_set(fd, AUDIT_STATUS_PID, getpid());