audit_init_filter_exe
err = audit_init_filter_exe(filter, NULL);
EXPECT_EQ(0, audit_init_filter_exe(&self->audit_filter,