ima_log_string
ima_log_string(ab, "action", "measure");
ima_log_string(ab, "action", "dont_measure");
ima_log_string(ab, "action", "appraise");
ima_log_string(ab, "action", "dont_appraise");
ima_log_string(ab, "action", "audit");
ima_log_string(ab, "action", "dont_audit");
ima_log_string(ab, "action", "hash");
ima_log_string(ab, "action", "dont_hash");
ima_log_string(ab, "func", args[0].from);
ima_log_string(ab, "mask", args[0].from);
ima_log_string(ab, "fsmagic", args[0].from);
ima_log_string(ab, "fsname", args[0].from);
ima_log_string(ab, "fs_subtype", args[0].from);
ima_log_string(ab, "keyrings", args[0].from);
ima_log_string(ab, "label", args[0].from);
ima_log_string(ab, "fsuuid", args[0].from);
ima_log_string(ab, "obj_user", args[0].from);
ima_log_string(ab, "obj_role", args[0].from);
ima_log_string(ab, "obj_type", args[0].from);
ima_log_string(ab, "subj_user", args[0].from);
ima_log_string(ab, "subj_role", args[0].from);
ima_log_string(ab, "subj_type", args[0].from);
ima_log_string(ab, "digest_type", args[0].from);
ima_log_string(ab, "appraise_type", args[0].from);
ima_log_string(ab, "appraise_flag", args[0].from);
ima_log_string(ab, "appraise_algos", args[0].from);
ima_log_string(ab, "pcr", args[0].from);
ima_log_string(ab, "template", args[0].from);
ima_log_string(ab, "UNKNOWN", p);