audit_add_watch   259 kernel/audit.h extern int audit_add_watch(struct audit_krule *krule, struct list_head **list);
audit_add_watch   962 kernel/auditfilter.c 		err = audit_add_watch(&entry->rule, &list);