audit_add_tree_rule 129 kernel/audit.h extern int audit_add_tree_rule(struct audit_krule *); audit_add_tree_rule 1315 kernel/auditfilter.c err = audit_add_tree_rule(&entry->rule);