/
proc
/
thread-self
/
root
/
usr
/
share
/
audit
/
sample-rules
/
up file
home
## This is to check if the system is making or receiving connections ## externally -a always,exit -F arch=b64 -S accept,connect -F key=external-access