audit-ossec-w:write
audit-ossec-r:read
audit-ossec-a:attribute
audit-ossec-x:execute
audit-ossec-c:command
