audit_watch_path
extern char *audit_watch_path(struct audit_watch *watch);
audit_watch_path(krule->watch));
if (strcmp(audit_watch_path(a->watch),
audit_watch_path(b->watch)))