feat: New spec "auditctl -l"

[huali027]

Signed-off-by: Huanhuan Li [email protected]

All Pull Requests:

Check all that apply:

• [x] Have you followed the guidelines in our Contributing document, including the instructions about commit messages?
• [ ] Is this PR to correct an issue?
• [ ] Is this PR an enhancement?

[huali027]

@xiangce Please help to review. Since there is already a parser for the command "auditctl status", I put them together. But the file name isn't general for "auditctl" commands. Currently, I'm afraid it will impact the existing parser path, I don't change it. Please suggest if I need to rename the file.