The text 5a8a3b8ca7d3, as Debian 6.0 (Squeeze), Debian 5.0 (Lenny) shipped it.
build up search rule
ausearch_add_interpreted_item(3) on Linux now
