//usr/share/doc/audit-2.8.5/rules/20-dont-audit.rules