The auptrace program uses the ptrace system call to follow forks while
tracing.  It adds audit rules as ptrace reports new descendants.
After a successful run, auptrace prints commands that can be used to
retrieve the relevant audit records.

[root@drawlight auptrace]# ./auptrace ./forkpipeline
Hello, World!

Audit records found with:

ausearch -r -p 16267 > 16267.txt
ausearch -r -p 16268 > 16268.txt
ausearch -r -p 16269 > 16269.txt
[root@drawlight auptrace]# 

The forkpipeline program is used to test auptrace.  Test auptrace with
the command:

$ ./auptrace -d ./forkpipeline

The return code will be zero when the test succeeds.
