AUDIT_NETFILTER_CFG 1325
AUDIT_SECCOMP 1326
AUDIT_PROCTITLE 1327
+
+#ifndef STRACE_WORKAROUND_FOR_AUDIT_FEATURE_CHANGE
+# define STRACE_WORKAROUND_FOR_AUDIT_FEATURE_CHANGE
+/*
+ * Linux kernel commit v3.15-rc1~18^2~1 has changed the value
+ * of AUDIT_FEATURE_CHANGE constant introduced by commit v3.13-rc1~19^2~20
+ * which is of course an ABI breakage that affected 3.13 and 3.14 kernel
+ * releases as well as their LTS derivatives.
+ * Linux kernel commit v3.15-rc1~18^2~1 also claims that the old value
+ * of AUDIT_FEATURE_CHANGE was ignored by userspace because of the established
+ * convention how netlink messages for the audit system are divided into blocks.
+ * Looks like the best way to handle this situation is to pretend that
+ * the old value of AUDIT_FEATURE_CHANGE didn't exist.
+ */
+# undef AUDIT_FEATURE_CHANGE
+#endif
AUDIT_FEATURE_CHANGE 1328
+
AUDIT_REPLACE 1329
AUDIT_KERN_MODULE 1330