The text dc016d510e37, as Debian 6.0 (Squeeze), Debian 5.0 (Lenny) shipped it.
build up search rule
ausearch_add_item(3) on Linux now
