code: def get_audits():
      
      checks = []
      settings = utils.get_settings('os')
      if not settings['security']['suid_sgid_enforce']:
          log("Skipping suid/sgid hardening", level=INFO)
          return checks
  
      # Build the blacklist and whitelist of files for suid/sgid checks.
      # There are a total of 4 lists:
      #   1. the system blacklist
      #   2. the system whitelist
      #   3. the user blacklist
      #   4. the user whitelist
      #
      # The blacklist is the set of paths which should NOT have the suid/sgid bit
      # set and the whitelist is the set of paths which MAY have the suid/sgid
      # bit setl. The user whitelist/blacklist effectively override the system
      # whitelist/blacklist.
      u_b = settings['security']['suid_sgid_blacklist']
      u_w = settings['security']['suid_sgid_whitelist']
  
      blacklist = set(BLACKLIST) - set(u_w + u_b)
      whitelist = set(WHITELIST) - set(u_b + u_w)
  
      checks.append(NoSUIDSGIDAudit(blacklist))
  
      dry_run = settings['security']['suid_sgid_dry_run_on_unknown']
  
      if settings['security']['suid_sgid_remove_from_unknown'] or dry_run:
          # If the policy is a dry_run (e.g. complain only) or remove unknown
          # suid/sgid bits then find all of the paths which have the suid/sgid
          # bit set and then remove the whitelisted paths.
          root_path = settings['environment']['root_path']
          unknown_paths = find_paths_with_suid_sgid(root_path) - set(whitelist)
          checks.append(NoSUIDSGIDAudit(unknown_paths, unless=dry_run))
  
      return checks
docs: Get OS hardening suid/sgid audits.
  
      :returns:  dictionary of audits