Files
| drwxr-x--- | 0 | root | root | /etc/audisp |
| drwxr-x--- | 0 | root | root | /etc/audit |
| -rw-r----- | 246 | root | root | /etc/audisp/audispd.conf |
| drwxr-x--- | 0 | root | root | /etc/audisp/plugins.d |
| -rw-r----- | 354 | root | root | /etc/audisp/plugins.d/af_unix.conf |
| -rw-r----- | 517 | root | root | /etc/audisp/plugins.d/syslog.conf |
| -rw-r----- | 127 | root | root | /etc/audit/audit-stop.rules |
| -rw-r----- | 0 | root | root | /etc/audit/audit.rules |
| -rw-r----- | 805 | root | root | /etc/audit/auditd.conf |
| -rw-r----- | 0 | root | root | /etc/audit/rules.d/audit.rules |
| -rwxr-xr-x | 19036 | root | root | /usr/bin/aulast |
| -rwxr-xr-x | 14836 | root | root | /usr/bin/aulastlog |
| -rwxr-xr-x | 14692 | root | root | /usr/bin/ausyscall |
| -r-sr-sr-t | 39940 | root | root | /usr/bin/auvirt |
| drwxr-xr-x | 0 | root | root | /usr/lib/.build-id |
| drwxr-xr-x | 0 | root | root | /usr/lib/.build-id/37 |
| drwxr-xr-x | 0 | root | root | /usr/lib/.build-id/44 |
| drwxr-xr-x | 0 | root | root | /usr/lib/.build-id/5d |
| drwxr-xr-x | 0 | root | root | /usr/lib/.build-id/6f |
| drwxr-xr-x | 0 | root | root | /usr/lib/.build-id/94 |
| drwxr-xr-x | 0 | root | root | /usr/lib/.build-id/a8 |
| drwxr-xr-x | 0 | root | root | /usr/lib/.build-id/bd |
| drwxr-xr-x | 0 | root | root | /usr/lib/.build-id/d2 |
| drwxr-xr-x | 0 | root | root | /usr/lib/.build-id/df |
| lrwxrwxrwx | 29 | root | root | /usr/lib/.build-id/37/25696da490e3d580c06458f9f9b5c702cf1971 |
| lrwxrwxrwx | 29 | root | root | /usr/lib/.build-id/44/071dd1a40756efeb3a3be80b084bac0774314c |
| lrwxrwxrwx | 28 | root | root | /usr/lib/.build-id/44/fd033b7018ad439b175f2fe668a7d685465f16 |
| lrwxrwxrwx | 29 | root | root | /usr/lib/.build-id/5d/9cf833952f416be61ce31ff3709c7019e83aa2 |
| lrwxrwxrwx | 26 | root | root | /usr/lib/.build-id/6f/de6e7794509e60448807b5330fd0cc627fde40 |
| lrwxrwxrwx | 26 | root | root | /usr/lib/.build-id/94/0c2fcbfd8bd841d599296db9e8a9873e7508c1 |
| lrwxrwxrwx | 29 | root | root | /usr/lib/.build-id/a8/bce55c4fb669207c2e21e13dc3d6537c5cf972 |
| lrwxrwxrwx | 29 | root | root | /usr/lib/.build-id/bd/d9bd8fcbff544e9ae54ef07b13c129f4aa1994 |
| lrwxrwxrwx | 27 | root | root | /usr/lib/.build-id/d2/2f7df0cc1983af4fd81d4d926dbe61bc51a969 |
| lrwxrwxrwx | 28 | root | root | /usr/lib/.build-id/df/7c5b9b4e9beb3e98a4a70ba0e614f84c585e22 |
| -rw-r--r-- | 1384 | root | root | /usr/lib/systemd/system/auditd.service |
| -rw-r--r-- | 31 | root | root | /usr/lib/tmpfiles.d/audit.conf |
| drwxr-x--- | 0 | root | root | /usr/libexec/initscripts/legacy-actions/auditd |
| -rwxr-x--- | 189 | root | root | /usr/libexec/initscripts/legacy-actions/auditd/condrestart |
| -rwxr-x--- | 341 | root | root | /usr/libexec/initscripts/legacy-actions/auditd/reload |
| -rwxr-x--- | 338 | root | root | /usr/libexec/initscripts/legacy-actions/auditd/restart |
| -rwxr-x--- | 345 | root | root | /usr/libexec/initscripts/legacy-actions/auditd/resume |
| -rwxr-x--- | 342 | root | root | /usr/libexec/initscripts/legacy-actions/auditd/rotate |
| -rwxr-x--- | 488 | root | root | /usr/libexec/initscripts/legacy-actions/auditd/state |
| -rwxr-x--- | 345 | root | root | /usr/libexec/initscripts/legacy-actions/auditd/stop |
| -rwxr-x--- | 46484 | root | root | /usr/sbin/audispd |
| -rwxr-xr-x | 46516 | root | root | /usr/sbin/auditctl |
| -rwxr-xr-x | 136644 | root | root | /usr/sbin/auditd |
| -rwxr-xr-x | 3795 | root | root | /usr/sbin/augenrules |
| -rwxr-xr-x | 127340 | root | root | /usr/sbin/aureport |
| -rwxr-xr-x | 127564 | root | root | /usr/sbin/ausearch |
| -rwxr-x--- | 19008 | root | root | /usr/sbin/autrace |
| drwxr-xr-x | 0 | root | root | /usr/share/doc/audit |
| -rw-r--r-- | 36843 | root | root | /usr/share/doc/audit/ChangeLog |
| -rw-r--r-- | 4975 | root | root | /usr/share/doc/audit/README |
| -rw-r--r-- | 271 | root | root | /usr/share/doc/audit/auditd.cron |
| drwxr-xr-x | 0 | root | root | /usr/share/doc/audit/rules |
| -rw-r--r-- | 240 | root | root | /usr/share/doc/audit/rules/10-base-config.rules |
| -rw-r--r-- | 284 | root | root | /usr/share/doc/audit/rules/10-no-audit.rules |
| -rw-r--r-- | 93 | root | root | /usr/share/doc/audit/rules/11-loginuid.rules |
| -rw-r--r-- | 329 | root | root | /usr/share/doc/audit/rules/12-cont-fail.rules |
| -rw-r--r-- | 323 | root | root | /usr/share/doc/audit/rules/12-ignore-error.rules |
| -rw-r--r-- | 516 | root | root | /usr/share/doc/audit/rules/20-dont-audit.rules |
| -rw-r--r-- | 273 | root | root | /usr/share/doc/audit/rules/21-no32bit.rules |
| -rw-r--r-- | 252 | root | root | /usr/share/doc/audit/rules/22-ignore-chrony.rules |
| -rw-r--r-- | 506 | root | root | /usr/share/doc/audit/rules/23-ignore-filesystems.rules |
| -rw-r--r-- | 4907 | root | root | /usr/share/doc/audit/rules/30-nispom.rules |
| -rw-r--r-- | 10392 | root | root | /usr/share/doc/audit/rules/30-ospp-v42.rules |
| -rw-r--r-- | 5954 | root | root | /usr/share/doc/audit/rules/30-pci-dss-v31.rules |
| -rw-r--r-- | 6585 | root | root | /usr/share/doc/audit/rules/30-stig.rules |
| -rw-r--r-- | 1458 | root | root | /usr/share/doc/audit/rules/31-privileged.rules |
| -rw-r--r-- | 213 | root | root | /usr/share/doc/audit/rules/32-power-abuse.rules |
| -rw-r--r-- | 156 | root | root | /usr/share/doc/audit/rules/40-local.rules |
| -rw-r--r-- | 439 | root | root | /usr/share/doc/audit/rules/41-containers.rules |
| -rw-r--r-- | 672 | root | root | /usr/share/doc/audit/rules/42-injection.rules |
| -rw-r--r-- | 398 | root | root | /usr/share/doc/audit/rules/43-module-load.rules |
| -rw-r--r-- | 326 | root | root | /usr/share/doc/audit/rules/70-einval.rules |
| -rw-r--r-- | 151 | root | root | /usr/share/doc/audit/rules/71-networking.rules |
| -rw-r--r-- | 86 | root | root | /usr/share/doc/audit/rules/99-finalize.rules |
| -rw-r--r-- | 15654 | root | root | /usr/share/doc/audit/rules/Makefile |
| -rw-r--r-- | 1357 | root | root | /usr/share/doc/audit/rules/Makefile.am |
| -rw-r--r-- | 14688 | root | root | /usr/share/doc/audit/rules/Makefile.in |
| -rw-r--r-- | 1202 | root | root | /usr/share/doc/audit/rules/README-rules |
| -rw-r--r-- | 1400 | root | root | /usr/share/man/man5/audispd.conf.5.xz |
| -rw-r--r-- | 5604 | root | root | /usr/share/man/man5/auditd.conf.5.xz |
| -rw-r--r-- | 2092 | root | root | /usr/share/man/man5/ausearch-expression.5.xz |
| -rw-r--r-- | 4564 | root | root | /usr/share/man/man7/audit.rules.7.xz |
| -rw-r--r-- | 1272 | root | root | /usr/share/man/man8/audispd.8.xz |
| -rw-r--r-- | 6680 | root | root | /usr/share/man/man8/auditctl.8.xz |
| -rw-r--r-- | 1652 | root | root | /usr/share/man/man8/auditd.8.xz |
| -r-sr-sr-- | 772 | root | root | /usr/share/man/man8/augenrules.8.xz |
| -rw-r--r-- | 1136 | root | root | /usr/share/man/man8/aulast.8.xz |
| -rw-r--r-- | 556 | root | root | /usr/share/man/man8/aulastlog.8.xz |
| -rw-r--r-- | 2492 | root | root | /usr/share/man/man8/aureport.8.xz |
| -rw-r--r-- | 5280 | root | root | /usr/share/man/man8/ausearch.8.xz |
| -rw-r--r-- | 1112 | root | root | /usr/share/man/man8/ausyscall.8.xz |
| -rw-r--r-- | 752 | root | root | /usr/share/man/man8/autrace.8.xz |
| -r-sr-sr-- | 1780 | root | root | /usr/share/man/man8/auvirt.8.xz |
| drwx------ | 0 | root | root | /var/log/audit |
