The text e075792a0257, as Debian 6.0 (Squeeze), Debian 5.0 (Lenny) shipped it.
build up search rule
ausearch_add_timestamp_item(3) on Linux now
