aa_audit_rule_known
int aa_audit_rule_known(struct audit_krule *rule);
LSM_HOOK_INIT(audit_rule_known, aa_audit_rule_known),