audit_find_rule   950 kernel/auditfilter.c 	e = audit_find_rule(entry, &list);
audit_find_rule  1032 kernel/auditfilter.c 	e = audit_find_rule(entry, &list);