[Bug 965861] Auditd reports unknown field for comm and exe when used on rules