audit_to_watch 257 kernel/audit.h extern int audit_to_watch(struct audit_krule *krule, char *path, int len, audit_to_watch 540 kernel/auditfilter.c err = audit_to_watch(&entry->rule, str, f_val, f->op);