[PATCH 1/4] audit: make filetype matching consistent with other filters