audit_filter_rules
if (audit_filter_rules(tsk, &e->rule, NULL, NULL,
audit_filter_rules(tsk, &e->rule, ctx, name,