User space tools for 2.6 kernel auditing