/proc/self/root/usr/share/audit/