Update permissions field of watch command
#include <libaudit.h>
int audit_update_watch_perms(struct audit_rule_data *rule, int perms);
audit_update_watch_perms adds the permission checks to a watch command that is being built. The perms are a bitwise or'ing of: AUDIT_PERM_EXEC, AUDIT_PERM_WRITE, AUDIT_PERM_READ, AUDIT_PERM_ATTR.
Returns a number < 0 if an error occurs; otherwise, 0 for success.
Steve Grubb