Constant netlink_packet_audit::constants::AUDIT_FILTER_TASK

pub const AUDIT_FILTER_TASK: u32 = 1;

Apply rule at task creation (not syscall)