//usr/share/doc/audit-2.8.5/rules/42-injection.rules