Files
| drwxr-x--- | 4096 | root | root | /etc/audisp |
| drwxr-x--- | 4096 | root | root | /etc/audit |
| -rw-r----- | 211 | root | root | /etc/audisp/audispd.conf |
| drwxr-x--- | 4096 | root | root | /etc/audisp/plugins.d |
| -rw-r----- | 358 | root | root | /etc/audisp/plugins.d/af_unix.conf |
| -rw-r----- | 517 | root | root | /etc/audisp/plugins.d/syslog.conf |
| -rw-r----- | 127 | root | root | /etc/audit/audit-stop.rules |
| -rw-r----- | 0 | root | root | /etc/audit/audit.rules |
| -rw-r----- | 784 | root | root | /etc/audit/auditd.conf |
| -rw-r----- | 0 | root | root | /etc/audit/rules.d/audit.rules |
| -rwxr-xr-x | 19888 | root | root | /usr/bin/aulast |
| -rwxr-xr-x | 11560 | root | root | /usr/bin/aulastlog |
| -rwxr-xr-x | 11384 | root | root | /usr/bin/ausyscall |
| -r-sr-sr-t | 36832 | root | root | /usr/bin/auvirt |
| -rw-r--r-- | 1204 | root | root | /usr/lib/systemd/system/auditd.service |
| -rw-r--r-- | 31 | root | root | /usr/lib/tmpfiles.d/audit.conf |
| drwxr-x--- | 4096 | root | root | /usr/libexec/initscripts/legacy-actions/auditd |
| -rwxr-x--- | 185 | root | root | /usr/libexec/initscripts/legacy-actions/auditd/condrestart |
| -rwxr-x--- | 334 | root | root | /usr/libexec/initscripts/legacy-actions/auditd/restart |
| -rwxr-x--- | 348 | root | root | /usr/libexec/initscripts/legacy-actions/auditd/resume |
| -rwxr-x--- | 345 | root | root | /usr/libexec/initscripts/legacy-actions/auditd/rotate |
| -rwxr-x--- | 348 | root | root | /usr/libexec/initscripts/legacy-actions/auditd/stop |
| -rwxr-x--- | 40576 | root | root | /usr/sbin/audispd |
| -rwxr-xr-x | 44480 | root | root | /usr/sbin/auditctl |
| -rwxr-xr-x | 124408 | root | root | /usr/sbin/auditd |
| -rwxr-xr-x | 3792 | root | root | /usr/sbin/augenrules |
| -rwxr-xr-x | 111960 | root | root | /usr/sbin/aureport |
| -rwxr-xr-x | 116448 | root | root | /usr/sbin/ausearch |
| -rwxr-x--- | 15784 | root | root | /usr/sbin/autrace |
| drwxr-xr-x | 4096 | root | root | /usr/share/doc/audit |
| -rw-r--r-- | 30373 | root | root | /usr/share/doc/audit/ChangeLog |
| -rw-r--r-- | 4975 | root | root | /usr/share/doc/audit/README |
| -rw-r--r-- | 271 | root | root | /usr/share/doc/audit/auditd.cron |
| drwxr-xr-x | 4096 | root | root | /usr/share/doc/audit/rules |
| -rw-r--r-- | 240 | root | root | /usr/share/doc/audit/rules/10-base-config.rules |
| -rw-r--r-- | 284 | root | root | /usr/share/doc/audit/rules/10-no-audit.rules |
| -rw-r--r-- | 93 | root | root | /usr/share/doc/audit/rules/11-loginuid.rules |
| -rw-r--r-- | 329 | root | root | /usr/share/doc/audit/rules/12-cont-fail.rules |
| -rw-r--r-- | 323 | root | root | /usr/share/doc/audit/rules/12-ignore-error.rules |
| -rw-r--r-- | 516 | root | root | /usr/share/doc/audit/rules/20-dont-audit.rules |
| -rw-r--r-- | 273 | root | root | /usr/share/doc/audit/rules/21-no32bit.rules |
| -rw-r--r-- | 252 | root | root | /usr/share/doc/audit/rules/22-ignore-chrony.rules |
| -rw-r--r-- | 4915 | root | root | /usr/share/doc/audit/rules/30-nispom.rules |
| -rw-r--r-- | 5952 | root | root | /usr/share/doc/audit/rules/30-pci-dss-v31.rules |
| -rw-r--r-- | 6663 | root | root | /usr/share/doc/audit/rules/30-stig.rules |
| -rw-r--r-- | 1498 | root | root | /usr/share/doc/audit/rules/31-privileged.rules |
| -rw-r--r-- | 218 | root | root | /usr/share/doc/audit/rules/32-power-abuse.rules |
| -rw-r--r-- | 156 | root | root | /usr/share/doc/audit/rules/40-local.rules |
| -rw-r--r-- | 439 | root | root | /usr/share/doc/audit/rules/41-containers.rules |
| -rw-r--r-- | 672 | root | root | /usr/share/doc/audit/rules/42-injection.rules |
| -rw-r--r-- | 424 | root | root | /usr/share/doc/audit/rules/43-module-load.rules |
| -rw-r--r-- | 326 | root | root | /usr/share/doc/audit/rules/70-einval.rules |
| -rw-r--r-- | 151 | root | root | /usr/share/doc/audit/rules/71-networking.rules |
| -rw-r--r-- | 86 | root | root | /usr/share/doc/audit/rules/99-finalize.rules |
| -rw-r--r-- | 15266 | root | root | /usr/share/doc/audit/rules/Makefile |
| -rw-r--r-- | 1306 | root | root | /usr/share/doc/audit/rules/Makefile.am |
| -rw-r--r-- | 14527 | root | root | /usr/share/doc/audit/rules/Makefile.in |
| -rw-r--r-- | 1202 | root | root | /usr/share/doc/audit/rules/README-rules |
| -rw-r--r-- | 1364 | root | root | /usr/share/man/man5/audispd.conf.5.xz |
| -rw-r--r-- | 5492 | root | root | /usr/share/man/man5/auditd.conf.5.xz |
| -rw-r--r-- | 2024 | root | root | /usr/share/man/man5/ausearch-expression.5.xz |
| -rw-r--r-- | 4112 | root | root | /usr/share/man/man7/audit.rules.7.xz |
| -rw-r--r-- | 1252 | root | root | /usr/share/man/man8/audispd.8.xz |
| -rw-r--r-- | 6576 | root | root | /usr/share/man/man8/auditctl.8.xz |
| -rw-r--r-- | 1584 | root | root | /usr/share/man/man8/auditd.8.xz |
| -r-sr-sr-- | 772 | root | root | /usr/share/man/man8/augenrules.8.xz |
| -rw-r--r-- | 1136 | root | root | /usr/share/man/man8/aulast.8.xz |
| -rw-r--r-- | 556 | root | root | /usr/share/man/man8/aulastlog.8.xz |
| -rw-r--r-- | 2300 | root | root | /usr/share/man/man8/aureport.8.xz |
| -rw-r--r-- | 4928 | root | root | /usr/share/man/man8/ausearch.8.xz |
| -rw-r--r-- | 1112 | root | root | /usr/share/man/man8/ausyscall.8.xz |
| -rw-r--r-- | 752 | root | root | /usr/share/man/man8/autrace.8.xz |
| -r-sr-sr-- | 1804 | root | root | /usr/share/man/man8/auvirt.8.xz |
| drwx------ | 4096 | root | root | /var/log/audit |
