audit_log_rule_change 1134 kernel/auditfilter.c 		audit_log_rule_change("add_rule", &entry->rule, !err);
audit_log_rule_change 1141 kernel/auditfilter.c 		audit_log_rule_change("remove_rule", &entry->rule, !err);