ausearch -c 'check_nagios' --raw | audit2allow -M my-checknagios