Files
| drwxr-x--- | 0 | root | root | /etc/audisp |
| drwxr-x--- | 0 | root | root | /etc/audit |
| -rw-r----- | 246 | root | root | /etc/audisp/audispd.conf |
| drwxr-x--- | 0 | root | root | /etc/audisp/plugins.d |
| -rw-r----- | 354 | root | root | /etc/audisp/plugins.d/af_unix.conf |
| -rw-r----- | 517 | root | root | /etc/audisp/plugins.d/syslog.conf |
| -rw-r----- | 127 | root | root | /etc/audit/audit-stop.rules |
| -rw-r----- | 0 | root | root | /etc/audit/audit.rules |
| -rw-r----- | 805 | root | root | /etc/audit/auditd.conf |
| -rw-r----- | 0 | root | root | /etc/audit/rules.d/audit.rules |
| -rwxr-xr-x | 19952 | root | root | /usr/bin/aulast |
| -rwxr-xr-x | 11608 | root | root | /usr/bin/aulastlog |
| -rwxr-xr-x | 11448 | root | root | /usr/bin/ausyscall |
| -r-sr-sr-t | 32696 | root | root | /usr/bin/auvirt |
| drwxr-xr-x | 0 | root | root | /usr/lib/.build-id |
| drwxr-xr-x | 0 | root | root | /usr/lib/.build-id/02 |
| drwxr-xr-x | 0 | root | root | /usr/lib/.build-id/17 |
| drwxr-xr-x | 0 | root | root | /usr/lib/.build-id/3b |
| drwxr-xr-x | 0 | root | root | /usr/lib/.build-id/5e |
| drwxr-xr-x | 0 | root | root | /usr/lib/.build-id/81 |
| drwxr-xr-x | 0 | root | root | /usr/lib/.build-id/99 |
| drwxr-xr-x | 0 | root | root | /usr/lib/.build-id/9c |
| drwxr-xr-x | 0 | root | root | /usr/lib/.build-id/ba |
| drwxr-xr-x | 0 | root | root | /usr/lib/.build-id/e9 |
| drwxr-xr-x | 0 | root | root | /usr/lib/.build-id/f2 |
| lrwxrwxrwx | 27 | root | root | /usr/lib/.build-id/02/4a414c7fdac763885a29e14029889496fdea2e |
| lrwxrwxrwx | 29 | root | root | /usr/lib/.build-id/17/be656947d44c52895b6792351032aed6d7f098 |
| lrwxrwxrwx | 28 | root | root | /usr/lib/.build-id/3b/0b770f00d4b13bfe8f0000b6cf9c9cd3dc001a |
| lrwxrwxrwx | 26 | root | root | /usr/lib/.build-id/5e/0dffe0ac553cd7e645e391905475f46f056935 |
| lrwxrwxrwx | 29 | root | root | /usr/lib/.build-id/81/b311c55e795aff0c82a3dcdee14a32d6b0f80f |
| lrwxrwxrwx | 29 | root | root | /usr/lib/.build-id/99/63dd2aaede8501f31fece2c22f8272c39a5917 |
| lrwxrwxrwx | 29 | root | root | /usr/lib/.build-id/9c/467b252186459851a0ae00531a9e5bef26b540 |
| lrwxrwxrwx | 28 | root | root | /usr/lib/.build-id/ba/7800b01ba79a3026817c41c4d32ca1983b96dc |
| lrwxrwxrwx | 26 | root | root | /usr/lib/.build-id/e9/5f1e667e64cb41de3c2f66ef6c13e880c87d4b |
| lrwxrwxrwx | 29 | root | root | /usr/lib/.build-id/f2/f71343ea2484e7b534dd05ba07fa3c43addb02 |
| -rw-r--r-- | 1384 | root | root | /usr/lib/systemd/system/auditd.service |
| -rw-r--r-- | 31 | root | root | /usr/lib/tmpfiles.d/audit.conf |
| drwxr-x--- | 0 | root | root | /usr/libexec/initscripts/legacy-actions/auditd |
| -rwxr-x--- | 189 | root | root | /usr/libexec/initscripts/legacy-actions/auditd/condrestart |
| -rwxr-x--- | 341 | root | root | /usr/libexec/initscripts/legacy-actions/auditd/reload |
| -rwxr-x--- | 338 | root | root | /usr/libexec/initscripts/legacy-actions/auditd/restart |
| -rwxr-x--- | 345 | root | root | /usr/libexec/initscripts/legacy-actions/auditd/resume |
| -rwxr-x--- | 342 | root | root | /usr/libexec/initscripts/legacy-actions/auditd/rotate |
| -rwxr-x--- | 488 | root | root | /usr/libexec/initscripts/legacy-actions/auditd/state |
| -rwxr-x--- | 345 | root | root | /usr/libexec/initscripts/legacy-actions/auditd/stop |
| -rwxr-x--- | 43008 | root | root | /usr/sbin/audispd |
| -rwxr-xr-x | 43064 | root | root | /usr/sbin/auditctl |
| -rwxr-xr-x | 125000 | root | root | /usr/sbin/auditd |
| -rwxr-xr-x | 3795 | root | root | /usr/sbin/augenrules |
| -rwxr-xr-x | 107960 | root | root | /usr/sbin/aureport |
| -rwxr-xr-x | 116600 | root | root | /usr/sbin/ausearch |
| -rwxr-x--- | 15848 | root | root | /usr/sbin/autrace |
| drwxr-xr-x | 0 | root | root | /usr/share/doc/audit |
| -rw-r--r-- | 36843 | root | root | /usr/share/doc/audit/ChangeLog |
| -rw-r--r-- | 4975 | root | root | /usr/share/doc/audit/README |
| -rw-r--r-- | 271 | root | root | /usr/share/doc/audit/auditd.cron |
| drwxr-xr-x | 0 | root | root | /usr/share/doc/audit/rules |
| -rw-r--r-- | 240 | root | root | /usr/share/doc/audit/rules/10-base-config.rules |
| -rw-r--r-- | 284 | root | root | /usr/share/doc/audit/rules/10-no-audit.rules |
| -rw-r--r-- | 93 | root | root | /usr/share/doc/audit/rules/11-loginuid.rules |
| -rw-r--r-- | 329 | root | root | /usr/share/doc/audit/rules/12-cont-fail.rules |
| -rw-r--r-- | 323 | root | root | /usr/share/doc/audit/rules/12-ignore-error.rules |
| -rw-r--r-- | 516 | root | root | /usr/share/doc/audit/rules/20-dont-audit.rules |
| -rw-r--r-- | 273 | root | root | /usr/share/doc/audit/rules/21-no32bit.rules |
| -rw-r--r-- | 252 | root | root | /usr/share/doc/audit/rules/22-ignore-chrony.rules |
| -rw-r--r-- | 506 | root | root | /usr/share/doc/audit/rules/23-ignore-filesystems.rules |
| -rw-r--r-- | 4907 | root | root | /usr/share/doc/audit/rules/30-nispom.rules |
| -rw-r--r-- | 10392 | root | root | /usr/share/doc/audit/rules/30-ospp-v42.rules |
| -rw-r--r-- | 5954 | root | root | /usr/share/doc/audit/rules/30-pci-dss-v31.rules |
| -rw-r--r-- | 6585 | root | root | /usr/share/doc/audit/rules/30-stig.rules |
| -rw-r--r-- | 1458 | root | root | /usr/share/doc/audit/rules/31-privileged.rules |
| -rw-r--r-- | 213 | root | root | /usr/share/doc/audit/rules/32-power-abuse.rules |
| -rw-r--r-- | 156 | root | root | /usr/share/doc/audit/rules/40-local.rules |
| -rw-r--r-- | 439 | root | root | /usr/share/doc/audit/rules/41-containers.rules |
| -rw-r--r-- | 672 | root | root | /usr/share/doc/audit/rules/42-injection.rules |
| -rw-r--r-- | 398 | root | root | /usr/share/doc/audit/rules/43-module-load.rules |
| -rw-r--r-- | 326 | root | root | /usr/share/doc/audit/rules/70-einval.rules |
| -rw-r--r-- | 151 | root | root | /usr/share/doc/audit/rules/71-networking.rules |
| -rw-r--r-- | 86 | root | root | /usr/share/doc/audit/rules/99-finalize.rules |
| -rw-r--r-- | 15546 | root | root | /usr/share/doc/audit/rules/Makefile |
| -rw-r--r-- | 1357 | root | root | /usr/share/doc/audit/rules/Makefile.am |
| -rw-r--r-- | 14688 | root | root | /usr/share/doc/audit/rules/Makefile.in |
| -rw-r--r-- | 1202 | root | root | /usr/share/doc/audit/rules/README-rules |
| -rw-r--r-- | 1400 | root | root | /usr/share/man/man5/audispd.conf.5.xz |
| -rw-r--r-- | 5604 | root | root | /usr/share/man/man5/auditd.conf.5.xz |
| -rw-r--r-- | 2092 | root | root | /usr/share/man/man5/ausearch-expression.5.xz |
| -rw-r--r-- | 4564 | root | root | /usr/share/man/man7/audit.rules.7.xz |
| -rw-r--r-- | 1272 | root | root | /usr/share/man/man8/audispd.8.xz |
| -rw-r--r-- | 6680 | root | root | /usr/share/man/man8/auditctl.8.xz |
| -rw-r--r-- | 1652 | root | root | /usr/share/man/man8/auditd.8.xz |
| -r-sr-sr-- | 772 | root | root | /usr/share/man/man8/augenrules.8.xz |
| -rw-r--r-- | 1136 | root | root | /usr/share/man/man8/aulast.8.xz |
| -rw-r--r-- | 556 | root | root | /usr/share/man/man8/aulastlog.8.xz |
| -rw-r--r-- | 2492 | root | root | /usr/share/man/man8/aureport.8.xz |
| -rw-r--r-- | 5280 | root | root | /usr/share/man/man8/ausearch.8.xz |
| -rw-r--r-- | 1112 | root | root | /usr/share/man/man8/ausyscall.8.xz |
| -rw-r--r-- | 752 | root | root | /usr/share/man/man8/autrace.8.xz |
| -r-sr-sr-- | 1780 | root | root | /usr/share/man/man8/auvirt.8.xz |
| drwx------ | 0 | root | root | /var/log/audit |
