AUDIT_INODE_PARENT
audit_inode(name, parent->dentry, AUDIT_INODE_PARENT);
audit_inode(nd->name, dir, AUDIT_INODE_PARENT);
AUDIT_INODE_PARENT | AUDIT_INODE_HIDDEN);
bool parent = flags & AUDIT_INODE_PARENT;