/usr/share/audit/sample-rules/43-module-load.rules