audit_compare_rule 906 kernel/auditfilter.c if (!audit_compare_rule(&entry->rule, &e->rule)) { audit_compare_rule 917 kernel/auditfilter.c if (!audit_compare_rule(&entry->rule, &e->rule)) {