/usr/share/audit/sample-rules/10-base-config.rules