//usr/share/doc/audit-2.8.5/rules/10-base-config.rules