/usr/share/audit/sample-rules/30-ospp-v42-5-perm-change-failed.rules