audit_add_tree_rule  129 kernel/audit.h extern int audit_add_tree_rule(struct audit_krule *);
audit_add_tree_rule 1315 kernel/auditfilter.c 		err = audit_add_tree_rule(&entry->rule);