# auditctl
# Autogenerated from man page /usr/share/man/man8/auditctl.8.gz
complete -c auditctl -s b -d 'Set max number (limit) of outstanding audit buffers allowed (Kernel Default=6…'
complete -c auditctl -l backlog_wait_time -d 'Set the time for the kernel to wait (Kernel Default 60*HZ) when the backlog l…'
complete -c auditctl -l reset_backlog_wait_time_actual -d 'Reset the actual backlog wait time counter shown by the status command'
complete -c auditctl -s c -d 'Continue loading rules in spite of an error'
complete -c auditctl -s D -d 'Delete all rules and watches.  This can take a key option (-k), too'
complete -c auditctl -s e -d 'Set enabled flag'
complete -c auditctl -s f -d 'Set failure mode 0=silent 1=printk 2=panic'
complete -c auditctl -s h -d Help
complete -c auditctl -s i -d 'When given by itself, ignore errors when reading rules from a file'
complete -c auditctl -s s -d 'then it gives an interpretation of the numbers to human readable words if pos…'
complete -c auditctl -l loginuid-immutable -d 'This option tells the kernel to make loginuids unchangeable once they are set'
complete -c auditctl -s q -d 'If you have an existing directory watch and bind or move mount another subtre…'
complete -c auditctl -s r -d 'Set limit in messages/sec (0=none)'
complete -c auditctl -l reset-lost -d 'Reset the lost record counter shown by the status command'
complete -c auditctl -s R -d 'Read and execute auditctl commands from a file'
complete -c auditctl -l signal -d 'Send a signal to the audit daemon.  You must have privileges to do this'
complete -c auditctl -s t -d 'Trim the subtrees after a mount command.  STATUS OPTIONS'
complete -c auditctl -s l -d 'List all rules 1 per line.  Two more options may be given to this command'
complete -c auditctl -s m -d 'Send a user space message into the audit system'
complete -c auditctl -s v -d 'Print the version of auditctl'
complete -c auditctl -s a -d 'Append rule to the end of list with action'
complete -c auditctl -s A -d 'Add rule to the beginning list with action'
complete -c auditctl -s C -d 'Build an inter-field comparison rule: field, operation, field'
complete -c auditctl -s d -d 'Delete rule from list with action'
complete -c auditctl -s F -d 'Build a rule field: name, operation, value'
complete -c auditctl -s k -d 'Set a filter key on an audit rule.  This is deprecated when used with watches'
complete -c auditctl -s p -d 'Describe the permission access type that a file system watch will trigger on'
complete -c auditctl -s S -d 'Any syscall name or number may be used.  The word \'all\' may also be used'
complete -c auditctl -s w -d 'Place a watch on path'
complete -c auditctl -s W -d 'Remove a watch for the file system object at path'

