The text 004c3314c42b, as Debian 12 (Bookworm) shipped it.
build up search expression
ausearch_add_expression(3) on Linux now
