Why auditing Linux for Security is like finding a needle in the haystack