212 	 * trigger from the kernel.  in swap_audit_file()
346  * Close auditd pid file and trigger mechanism.
360 		auditd_log_err("Error closing trigger messaging mechanism");  in close_misc()
479  * Handle the audit trigger event.
485  * specific concern is the rotate trigger -- if one is dropped, then it will
490 auditd_handle_trigger(int trigger)  in auditd_handle_trigger()  argument
506 		switch (trigger) {  in auditd_handle_trigger()
514 			if ((trigger == last_trigger) &&  in auditd_handle_trigger()
518 					    "Suppressing duplicate trigger %d",  in auditd_handle_trigger()
519 					    trigger);  in auditd_handle_trigger()
538 		 * trigger, not before, or we will never allow that trigger  in auditd_handle_trigger()
541 		last_trigger = trigger;  in auditd_handle_trigger()
550 	switch(trigger) {  in auditd_handle_trigger()
552 		auditd_log_notice("Got low space trigger");  in auditd_handle_trigger()
558 		auditd_log_notice("Got no space trigger");  in auditd_handle_trigger()
565 		auditd_log_info("Got open new trigger from %s", trigger ==  in auditd_handle_trigger()
572 		auditd_log_info("Got read file trigger");  in auditd_handle_trigger()
582 		auditd_log_info("Got close and die trigger");  in auditd_handle_trigger()
596 		auditd_log_info("Got audit initialize trigger");  in auditd_handle_trigger()
602 		auditd_log_info("Got audit expire trails trigger");  in auditd_handle_trigger()
610 		auditd_log_err("Got unknown trigger %d", trigger);  in auditd_handle_trigger()
763 		auditd_log_err("Error opening trigger messaging mechanism");  in setup()
772 	 * run this after opening the trigger device to avoid configuring  in setup()
788 	 * If under launchd, don't start auditing.  Wait for a trigger to  in setup()