audit_add_tree_rule  281 kernel/audit.h extern int audit_add_tree_rule(struct audit_krule *rule);
audit_add_tree_rule  975 kernel/auditfilter.c 		err = audit_add_tree_rule(&entry->rule);