/usr/share/audit/sample-rules/20-dont-audit.rules