The Linux Audit System does not work for arm based systems. It is pretty easy
to add audit support if someone can help me figure out the calling convention
for the kernel. The place that needs to be hooked is here:
I need to figure out which registers have syscall arg0, arg1, arg2, and arg4.
For comparison, the MIPS processor is hooked into the audit system: