matches_log_fs
EXPECT_EQ(0, matches_log_fs(_metadata, self->audit_fd, "fs\\.execute",
EXPECT_EQ(0, matches_log_fs(_metadata, self->audit_fd, "fs\\.execute",
EXPECT_EQ(0, matches_log_fs(_metadata, self->audit_fd,
EXPECT_EQ(0, matches_log_fs(_metadata, self->audit_fd,
EXPECT_EQ(0, matches_log_fs(_metadata, self->audit_fd,
EXPECT_EQ(0, matches_log_fs(_metadata, self->audit_fd, "fs\\.read_file",
EXPECT_EQ(0, matches_log_fs(_metadata, self->audit_fd, "fs\\.read_dir",
EXPECT_EQ(0, matches_log_fs(_metadata, self->audit_fd,
EXPECT_EQ(0, matches_log_fs(_metadata, self->audit_fd,
EXPECT_EQ(0, matches_log_fs(_metadata, self->audit_fd,
EXPECT_EQ(0, matches_log_fs(_metadata, self->audit_fd, "fs\\.make_char",
EXPECT_EQ(0, matches_log_fs(_metadata, self->audit_fd, "fs\\.make_dir",
EXPECT_EQ(0, matches_log_fs(_metadata, self->audit_fd, "fs\\.make_reg",
EXPECT_EQ(0, matches_log_fs(_metadata, self->audit_fd, "fs\\.make_sock",
EXPECT_EQ(0, matches_log_fs(_metadata, self->audit_fd, "fs\\.make_fifo",
EXPECT_EQ(0, matches_log_fs(_metadata, self->audit_fd,
EXPECT_EQ(0, matches_log_fs(_metadata, self->audit_fd, "fs\\.make_sym",
EXPECT_EQ(0, matches_log_fs(_metadata, self->audit_fd, "fs\\.refer",
EXPECT_EQ(0, matches_log_fs(_metadata, self->audit_fd, "fs\\.refer",
EXPECT_EQ(0, matches_log_fs(_metadata, self->audit_fd, "fs\\.refer",
EXPECT_EQ(0, matches_log_fs(_metadata, self->audit_fd,
EXPECT_EQ(0, matches_log_fs(_metadata, self->audit_fd,
EXPECT_EQ(0, matches_log_fs(_metadata, self->audit_fd,
EXPECT_EQ(0, matches_log_fs(_metadata, self->audit_fd,
EXPECT_EQ(0, matches_log_fs(_metadata, self->audit_fd,
EXPECT_EQ(0, matches_log_fs(_metadata, self->audit_fd, "fs\\.refer",
EXPECT_EQ(0, matches_log_fs(_metadata, self->audit_fd, "fs\\.truncate",
EXPECT_EQ(0, matches_log_fs(_metadata, self->audit_fd,