audit_rule_change  168 include/linux/audit.h extern int audit_rule_change(int type, int seq, void *data, size_t datasz);
audit_rule_change 1372 kernel/audit.c 		err = audit_rule_change(msg_type, seq, data, data_len);