[PATCH V6 0/4] audit by executable name