selinux_audit_rule
struct selinux_audit_rule *rule = vrule;
struct selinux_audit_rule *tmprule;
struct selinux_audit_rule **rule = (struct selinux_audit_rule **)vrule;
tmprule = kzalloc_obj(struct selinux_audit_rule, gfp);
struct selinux_audit_rule *rule = vrule;