Rules are added so that all permission modifications made via `setxattr`_ are logged. .. _setxattr: http://man7.org/linux/man-pages/man2/setxattr.2.html