A system administrator sets up a global BSM policy that audits all user events except file access. Which is the correct entry in audit_user(4)?

A.
flags:all,^fa

B.
flags:^all:fc

C.
naflags:all:fr

D.
naflags:all:^fr