- VERSION 1.0
- FORMAT: F - Function called
- FORMAT: S - Access Status
- FORMAT: P - Path as passed to function
- FORMAT: A - Absolute Path (not canonical)
- FORMAT: R - Canonical Path
- FORMAT: C - Command Line
- F: CREAT
- S: deny
- P: /proc/self/exe
- A: /proc/self/exe
- R: /proc/self/exe
- C: ./conftest