What syscall is used by rm?  There is one for rmdir but I can't figure out how to audit when a file is deleted.

Thanks,
-Mont