PREUN

/bin/sh

/sbin/service auditd stop > /dev/null 2>&1

if [ $1 -eq 0 ] ; then 
        # Package removal, not upgrade 
        /usr/bin/systemctl --no-reload disable auditd.service > /dev/null 2>&1 || : 
        /usr/bin/systemctl stop auditd.service > /dev/null 2>&1 || : 
fi

POSTIN

/bin/sh

# Copy default rules into place on new installation
if [ ! -e /etc/audit/audit.rules ] ; then
	cp /etc/audit/rules.d/audit.rules /etc/audit/audit.rules
fi

if [ $1 -eq 1 ] ; then 
        # Initial installation 
        /usr/bin/systemctl preset auditd.service >/dev/null 2>&1 || : 
fi

POSTUN

/bin/sh

if [ $1 -ge 1 ]; then
   /sbin/service auditd condrestart > /dev/null 2>&1 || :
fi