Auditing in old versions of Linux