audit_remove_watch_rule
extern void audit_remove_watch_rule(struct audit_krule *krule);
audit_remove_watch_rule(&e->rule);