/usr/share/audit/sample-rules/12-ignore-error.rules