[PATCH 3/3] kernel/audit: audit_tree_match can be boolean