Re: Audit rule that applies when auid >= 500