AUDIT_ADD_RULE
case AUDIT_ADD_RULE:
case AUDIT_ADD_RULE:
msg_type == AUDIT_ADD_RULE ?
case AUDIT_ADD_RULE:
{ AUDIT_ADD_RULE, NETLINK_AUDIT_SOCKET__NLMSG_WRITE },
err = audit_filter_exe(fd, filter, AUDIT_ADD_RULE);
EXPECT_EQ(0, audit_filter_drop(self->audit_fd, AUDIT_ADD_RULE));
EXPECT_EQ(0, audit_filter_drop(self->audit_fd, AUDIT_ADD_RULE));
EXPECT_EQ(0, audit_filter_drop(self->audit_fd, AUDIT_ADD_RULE));
AUDIT_ADD_RULE));