This patch fixes this by utilizing the open_how struct that we store inside the audit_context with audit_openat2_how(). unbiased of the patch, Richard dude Briggs posted the same patch for the audit mailing checklist https://mediajx.com/story19523345/indicators-on-smm-telegram-you-should-know