## umount
-a always,exit -F arch=b32 -S umount -F key=32bit_umount
-a always,exit -F arch=b32 -S umount2 -F key=32bit_umount2
-a always,exit -F arch=b64 -S umount2 -F key=64bit_umount2