audit_remove_tree_rule  282 kernel/audit.h extern int audit_remove_tree_rule(struct audit_krule *rule);
audit_remove_tree_rule 1042 kernel/auditfilter.c 		audit_remove_tree_rule(&e->rule);