1 # supress audit messages for attempting access to /firmware 2 dontaudit dumpstate firmware_file:dir search; 3