selinux_audit_rule_known
LSM_HOOK_INIT(audit_rule_known, selinux_audit_rule_known),
int selinux_audit_rule_known(struct audit_krule *rule);