/usr/share/audit/sample-rules/22-ignore-chrony.rules