AUDIT_ANOM_LINK
audit_log_path_denied(AUDIT_ANOM_LINK, "follow_link");
audit_log_path_denied(AUDIT_ANOM_LINK, "linkat");