[PATCH v3 2/4] audit(userspace): Substitute armeb with arm