Revert syscall flags adding custom rules template

manifests/customrule.pp

@@ -0,0 +1,14 @@
+# Rules for non contempled cases
+#
+# Literal String set
+#
+define audit::customrule (
+                           $customrules [],
+                         ) {
+ #
+ concat::fragment{ "${audit::params::audit_file} custom rule"
+    target  => $audit::params::audit_file,
+    order   => '12',
+    content => template("${module_name}/customrule.erb"),
+  }
+}

manifests/init.pp

@@ -7,6 +7,7 @@
 # 02 default security rules
 # 10 fsrules
 # 11 syscallrules
+# 12 customrules
 #
 class audit (
               $buffers                = '320',

templates/customrule.erb

@@ -0,0 +1 @@
+<% @customrules.each do |rule| %> <%= rule %><% end %>

templates/syscallrule.erb

@@ -1 +1 @@
--a <%= @action %> <% @fields_eq.each do |field, value| %> -F <%= field %>=<%= value %><% end %><% @fields_neq.each do |field, value| %> -F <%= field %>!=<%= value %><% end %><% @fields.each do |field| %> -F <%= field %><% end %> -S <%= @syscall %> -k <%= @keyname %>
+-a <%= @action %> -S <%= @syscall %> <% @fields_eq.each do |field, value| %> -F <%= field %>=<%= value %><% end %><% @fields_neq.each do |field, value| %> -F <%= field %>!=<%= value %><% end %><% @fields.each do |field| %> -F <%= field %><% end %> -k <%= @keyname %>