RFE: add fsnotify test

[rprobaina]

Simple test case to verify that records related to fsnotify events are captured as expected.

This test case adds full coverage to the following audit_fsnotify.c functions, which have not been exercised by any other test case of the test suite:

• audit_mark_handle_event()
• audit_autoremove_mark_rule()
• audit_mark_log_rule_change()

Signed-off-by: Ricardo Robaina [email protected]