[PATCH V4 1/4] audit: implement audit by executable