PURPOSE of /CoreOS/audit/Sanity/ausearch_expression
Description: Sanity test for ausearch expression API
Author: Ondrej Moris <omoris@redhat.com>

Audit lib provides the following function in API for auparse:

  * int ausearch_add_expression(auparse_state_t *au,
                                const char *expression,
                                char **error,
                                ausearch_rule_t how);

This is a sanity test for this function. Currently only the supported
fields are virtual ones and *uid and *gid.

We are testing the following

 * logical operators !, && and ||;
 * comparison operators <, <=, ==, >, >=, !==, i=, i!=, r= and r!=;
 * virtual fields \timestamp, \timestamp_ex and \record_type;
 * actual fields: *uid and *gid.