Handle readonly File violation corner case for Audit mode

Fixes: #213

Signed-off-by: Ayush Dwivedi <ayush.dwivedi@accuknox.com>

KubeArmor/feeder/policyMatcher.go

@@ -791,6 +791,7 @@ func (fd *Feeder) UpdateMatchedPolicy(log tp.Log) tp.Log {
 
 							log.Type = "MatchedPolicy"
 							log.Action = secPolicy.Action
+
 						}
 					}
 				}
@@ -908,7 +909,7 @@ func (fd *Feeder) UpdateMatchedPolicy(log tp.Log) tp.Log {
 				return log
 			}
 		} else if log.Type == "MatchedPolicy" {
-			if log.Action == "Allow" && log.Result == "Passed" {
+			if log.PolicyEnabled != tp.KubeArmorPolicyAudited && log.Action == "Allow" && log.Result == "Passed" {
 				// use 'AllowWithAudit' to get the logs for allowed operations
 				return tp.Log{}
 			}