| drwxr-x--- | 0 | root |
root |
/etc/audit
|
| -rw-r----- | 127 | root |
root |
/etc/audit/audit-stop.rules
|
| -rw-r----- | 0 | root |
root |
/etc/audit/audit.rules
|
| -rw-r----- | 882 | root |
root |
/etc/audit/auditd.conf
|
| drwxr-x--- | 0 | root |
root |
/etc/audit/plugins.d
|
| drwxr-x--- | 0 | root |
root |
/etc/audit/rules.d
|
| -rw-r----- | 354 | root |
root |
/etc/audit/plugins.d/af_unix.conf
|
| -rw-r----- | 0 | root |
root |
/etc/audit/rules.d/audit.rules
|
| -rwxr-xr-x | 14976 | root |
root |
/usr/bin/aulast
|
| -rwxr-xr-x | 10764 | root |
root |
/usr/bin/aulastlog
|
| -rwxr-xr-x | 10560 | root |
root |
/usr/bin/ausyscall
|
| -r-sr-sr-t | 27488 | root |
root |
/usr/bin/auvirt
|
| drwxr-xr-x | 0 | root |
root |
/usr/lib/.build-id
|
| drwxr-xr-x | 0 | root |
root |
/usr/lib/.build-id/0b
|
| drwxr-xr-x | 0 | root |
root |
/usr/lib/.build-id/16
|
| drwxr-xr-x | 0 | root |
root |
/usr/lib/.build-id/6c
|
| drwxr-xr-x | 0 | root |
root |
/usr/lib/.build-id/6d
|
| drwxr-xr-x | 0 | root |
root |
/usr/lib/.build-id/70
|
| drwxr-xr-x | 0 | root |
root |
/usr/lib/.build-id/85
|
| drwxr-xr-x | 0 | root |
root |
/usr/lib/.build-id/c5
|
| drwxr-xr-x | 0 | root |
root |
/usr/lib/.build-id/d6
|
| drwxr-xr-x | 0 | root |
root |
/usr/lib/.build-id/f2
|
| lrwxrwxrwx | 28 | root |
root |
/usr/lib/.build-id/0b/a1224faf4d15fdb522980f76049a1904b97d5a
|
| lrwxrwxrwx | 26 | root |
root |
/usr/lib/.build-id/16/c1e739b866c621178ed842b6605b7d394f17fa
|
| lrwxrwxrwx | 29 | root |
root |
/usr/lib/.build-id/6c/2423a067dfb40a1e53f9881714871d7c92829d
|
| lrwxrwxrwx | 27 | root |
root |
/usr/lib/.build-id/6d/908e118eb582869f7cf727c55b669932584520
|
| lrwxrwxrwx | 29 | root |
root |
/usr/lib/.build-id/70/9517189c3a260b498df1f45546a24dcfdd68f1
|
| lrwxrwxrwx | 26 | root |
root |
/usr/lib/.build-id/85/c6df0e717794517ba753a309b988fe6f68c54d
|
| lrwxrwxrwx | 29 | root |
root |
/usr/lib/.build-id/c5/84c902cd97ed8e46ca07ae940ce8ddab2e98fd
|
| lrwxrwxrwx | 29 | root |
root |
/usr/lib/.build-id/d6/bedfd03fc7dd8ae531bf75d2793f6854161b7b
|
| lrwxrwxrwx | 29 | root |
root |
/usr/lib/.build-id/f2/f399542687133a2f50a9f5edc7d47392a891c7
|
| -rw-r--r-- | 1771 | root |
root |
/usr/lib/systemd/system/auditd.service
|
| -rw-r--r-- | 31 | root |
root |
/usr/lib/tmpfiles.d/audit.conf
|
| -rwxr-x--- | 986 | root |
root |
/usr/libexec/audit-functions
|
| drwxr-x--- | 0 | root |
root |
/usr/libexec/initscripts/legacy-actions/auditd
|
| -rwxr-x--- | 298 | root |
root |
/usr/libexec/initscripts/legacy-actions/auditd/condrestart
|
| -rwxr-x--- | 375 | root |
root |
/usr/libexec/initscripts/legacy-actions/auditd/reload
|
| -rwxr-x--- | 338 | root |
root |
/usr/libexec/initscripts/legacy-actions/auditd/restart
|
| -rwxr-x--- | 355 | root |
root |
/usr/libexec/initscripts/legacy-actions/auditd/resume
|
| -rwxr-x--- | 352 | root |
root |
/usr/libexec/initscripts/legacy-actions/auditd/rotate
|
| -rwxr-x--- | 498 | root |
root |
/usr/libexec/initscripts/legacy-actions/auditd/state
|
| -rwxr-x--- | 538 | root |
root |
/usr/libexec/initscripts/legacy-actions/auditd/stop
|
| -rwxr-xr-x | 39588 | root |
root |
/usr/sbin/auditctl
|
| -rwxr-xr-x | 116224 | root |
root |
/usr/sbin/auditd
|
| -rwxr-xr-x | 3840 | root |
root |
/usr/sbin/augenrules
|
| -rwxr-xr-x | 98680 | root |
root |
/usr/sbin/aureport
|
| -rwxr-xr-x | 107132 | root |
root |
/usr/sbin/ausearch
|
| -rwxr-x--- | 14944 | root |
root |
/usr/sbin/autrace
|
| drwxr-xr-x | 0 | root |
root |
/usr/share/audit
|
| drwxr-xr-x | 0 | root |
root |
/usr/share/audit/sample-rules
|
| -rw-r--r-- | 244 | root |
root |
/usr/share/audit/sample-rules/10-base-config.rules
|
| -rw-r--r-- | 284 | root |
root |
/usr/share/audit/sample-rules/10-no-audit.rules
|
| -rw-r--r-- | 93 | root |
root |
/usr/share/audit/sample-rules/11-loginuid.rules
|
| -rw-r--r-- | 333 | root |
root |
/usr/share/audit/sample-rules/12-cont-fail.rules
|
| -rw-r--r-- | 327 | root |
root |
/usr/share/audit/sample-rules/12-ignore-error.rules
|
| -rw-r--r-- | 516 | root |
root |
/usr/share/audit/sample-rules/20-dont-audit.rules
|
| -rw-r--r-- | 273 | root |
root |
/usr/share/audit/sample-rules/21-no32bit.rules
|
| -rw-r--r-- | 254 | root |
root |
/usr/share/audit/sample-rules/22-ignore-chrony.rules
|
| -rw-r--r-- | 507 | root |
root |
/usr/share/audit/sample-rules/23-ignore-filesystems.rules
|
| -rw-r--r-- | 4935 | root |
root |
/usr/share/audit/sample-rules/30-nispom.rules
|
| -rw-r--r-- | 1500 | root |
root |
/usr/share/audit/sample-rules/30-ospp-v42-1-create-failed.rules
|
| -rw-r--r-- | 746 | root |
root |
/usr/share/audit/sample-rules/30-ospp-v42-1-create-success.rules
|
| -rw-r--r-- | 1646 | root |
root |
/usr/share/audit/sample-rules/30-ospp-v42-2-modify-failed.rules
|
| -rw-r--r-- | 826 | root |
root |
/usr/share/audit/sample-rules/30-ospp-v42-2-modify-success.rules
|
| -rw-r--r-- | 625 | root |
root |
/usr/share/audit/sample-rules/30-ospp-v42-3-access-failed.rules
|
| -rw-r--r-- | 399 | root |
root |
/usr/share/audit/sample-rules/30-ospp-v42-3-access-success.rules
|
| -rw-r--r-- | 562 | root |
root |
/usr/share/audit/sample-rules/30-ospp-v42-4-delete-failed.rules
|
| -rw-r--r-- | 284 | root |
root |
/usr/share/audit/sample-rules/30-ospp-v42-4-delete-success.rules
|
| -rw-r--r-- | 816 | root |
root |
/usr/share/audit/sample-rules/30-ospp-v42-5-perm-change-failed.rules
|
| -rw-r--r-- | 414 | root |
root |
/usr/share/audit/sample-rules/30-ospp-v42-5-perm-change-success.rules
|
| -rw-r--r-- | 579 | root |
root |
/usr/share/audit/sample-rules/30-ospp-v42-6-owner-change-failed.rules
|
| -rw-r--r-- | 295 | root |
root |
/usr/share/audit/sample-rules/30-ospp-v42-6-owner-change-success.rules
|
| -rw-r--r-- | 5944 | root |
root |
/usr/share/audit/sample-rules/30-ospp-v42.rules
|
| -rw-r--r-- | 6497 | root |
root |
/usr/share/audit/sample-rules/30-pci-dss-v31.rules
|
| -rw-r--r-- | 6934 | root |
root |
/usr/share/audit/sample-rules/30-stig.rules
|
| -rw-r--r-- | 1458 | root |
root |
/usr/share/audit/sample-rules/31-privileged.rules
|
| -rw-r--r-- | 213 | root |
root |
/usr/share/audit/sample-rules/32-power-abuse.rules
|
| -rw-r--r-- | 156 | root |
root |
/usr/share/audit/sample-rules/40-local.rules
|
| -rw-r--r-- | 439 | root |
root |
/usr/share/audit/sample-rules/41-containers.rules
|
| -rw-r--r-- | 672 | root |
root |
/usr/share/audit/sample-rules/42-injection.rules
|
| -rw-r--r-- | 398 | root |
root |
/usr/share/audit/sample-rules/43-module-load.rules
|
| -rw-r--r-- | 584 | root |
root |
/usr/share/audit/sample-rules/44-installers.rules
|
| -rw-r--r-- | 326 | root |
root |
/usr/share/audit/sample-rules/70-einval.rules
|
| -rw-r--r-- | 151 | root |
root |
/usr/share/audit/sample-rules/71-networking.rules
|
| -rw-r--r-- | 86 | root |
root |
/usr/share/audit/sample-rules/99-finalize.rules
|
| -rw-r--r-- | 1421 | root |
root |
/usr/share/audit/sample-rules/README-rules
|
| drwxr-xr-x | 0 | root |
root |
/usr/share/doc/audit
|
| -rw-r--r-- | 13017 | root |
root |
/usr/share/doc/audit/ChangeLog
|
| -rw-r--r-- | 4952 | root |
root |
/usr/share/doc/audit/README
|
| -rw-r--r-- | 330 | root |
root |
/usr/share/doc/audit/auditd.cron
|
| drwxr-xr-x | 0 | root |
root |
/usr/share/doc/audit/rules
|
| -rw-r--r-- | 244 | root |
root |
/usr/share/doc/audit/rules/10-base-config.rules
|
| -rw-r--r-- | 284 | root |
root |
/usr/share/doc/audit/rules/10-no-audit.rules
|
| -rw-r--r-- | 93 | root |
root |
/usr/share/doc/audit/rules/11-loginuid.rules
|
| -rw-r--r-- | 333 | root |
root |
/usr/share/doc/audit/rules/12-cont-fail.rules
|
| -rw-r--r-- | 327 | root |
root |
/usr/share/doc/audit/rules/12-ignore-error.rules
|
| -rw-r--r-- | 516 | root |
root |
/usr/share/doc/audit/rules/20-dont-audit.rules
|
| -rw-r--r-- | 273 | root |
root |
/usr/share/doc/audit/rules/21-no32bit.rules
|
| -rw-r--r-- | 254 | root |
root |
/usr/share/doc/audit/rules/22-ignore-chrony.rules
|
| -rw-r--r-- | 507 | root |
root |
/usr/share/doc/audit/rules/23-ignore-filesystems.rules
|
| -rw-r--r-- | 4935 | root |
root |
/usr/share/doc/audit/rules/30-nispom.rules
|
| -rw-r--r-- | 1500 | root |
root |
/usr/share/doc/audit/rules/30-ospp-v42-1-create-failed.rules
|
| -rw-r--r-- | 746 | root |
root |
/usr/share/doc/audit/rules/30-ospp-v42-1-create-success.rules
|
| -rw-r--r-- | 1646 | root |
root |
/usr/share/doc/audit/rules/30-ospp-v42-2-modify-failed.rules
|
| -rw-r--r-- | 826 | root |
root |
/usr/share/doc/audit/rules/30-ospp-v42-2-modify-success.rules
|
| -rw-r--r-- | 625 | root |
root |
/usr/share/doc/audit/rules/30-ospp-v42-3-access-failed.rules
|
| -rw-r--r-- | 399 | root |
root |
/usr/share/doc/audit/rules/30-ospp-v42-3-access-success.rules
|
| -rw-r--r-- | 562 | root |
root |
/usr/share/doc/audit/rules/30-ospp-v42-4-delete-failed.rules
|
| -rw-r--r-- | 284 | root |
root |
/usr/share/doc/audit/rules/30-ospp-v42-4-delete-success.rules
|
| -rw-r--r-- | 816 | root |
root |
/usr/share/doc/audit/rules/30-ospp-v42-5-perm-change-failed.rules
|
| -rw-r--r-- | 414 | root |
root |
/usr/share/doc/audit/rules/30-ospp-v42-5-perm-change-success.rules
|
| -rw-r--r-- | 579 | root |
root |
/usr/share/doc/audit/rules/30-ospp-v42-6-owner-change-failed.rules
|
| -rw-r--r-- | 295 | root |
root |
/usr/share/doc/audit/rules/30-ospp-v42-6-owner-change-success.rules
|
| -rw-r--r-- | 5944 | root |
root |
/usr/share/doc/audit/rules/30-ospp-v42.rules
|
| -rw-r--r-- | 6497 | root |
root |
/usr/share/doc/audit/rules/30-pci-dss-v31.rules
|
| -rw-r--r-- | 6934 | root |
root |
/usr/share/doc/audit/rules/30-stig.rules
|
| -rw-r--r-- | 1458 | root |
root |
/usr/share/doc/audit/rules/31-privileged.rules
|
| -rw-r--r-- | 213 | root |
root |
/usr/share/doc/audit/rules/32-power-abuse.rules
|
| -rw-r--r-- | 156 | root |
root |
/usr/share/doc/audit/rules/40-local.rules
|
| -rw-r--r-- | 439 | root |
root |
/usr/share/doc/audit/rules/41-containers.rules
|
| -rw-r--r-- | 672 | root |
root |
/usr/share/doc/audit/rules/42-injection.rules
|
| -rw-r--r-- | 398 | root |
root |
/usr/share/doc/audit/rules/43-module-load.rules
|
| -rw-r--r-- | 584 | root |
root |
/usr/share/doc/audit/rules/44-installers.rules
|
| -rw-r--r-- | 326 | root |
root |
/usr/share/doc/audit/rules/70-einval.rules
|
| -rw-r--r-- | 151 | root |
root |
/usr/share/doc/audit/rules/71-networking.rules
|
| -rw-r--r-- | 86 | root |
root |
/usr/share/doc/audit/rules/99-finalize.rules
|
| -rw-r--r-- | 18532 | root |
root |
/usr/share/doc/audit/rules/Makefile
|
| -rw-r--r-- | 1908 | root |
root |
/usr/share/doc/audit/rules/Makefile.am
|
| -rw-r--r-- | 17558 | root |
root |
/usr/share/doc/audit/rules/Makefile.in
|
| -rw-r--r-- | 1421 | root |
root |
/usr/share/doc/audit/rules/README-rules
|
| -rw-r--r-- | 2256 | root |
root |
/usr/share/man/man5/auditd-plugins.5.xz
|
| -rw-r--r-- | 6604 | root |
root |
/usr/share/man/man5/auditd.conf.5.xz
|
| -rw-r--r-- | 2092 | root |
root |
/usr/share/man/man5/ausearch-expression.5.xz
|
| -rw-r--r-- | 4740 | root |
root |
/usr/share/man/man7/audit.rules.7.xz
|
| -rw-r--r-- | 7344 | root |
root |
/usr/share/man/man8/auditctl.8.xz
|
| -rw-r--r-- | 1956 | root |
root |
/usr/share/man/man8/auditd.8.xz
|
| -r-sr-sr-- | 776 | root |
root |
/usr/share/man/man8/augenrules.8.xz
|
| -rw-r--r-- | 1164 | root |
root |
/usr/share/man/man8/aulast.8.xz
|
| -rw-r--r-- | 556 | root |
root |
/usr/share/man/man8/aulastlog.8.xz
|
| -rw-r--r-- | 2668 | root |
root |
/usr/share/man/man8/aureport.8.xz
|
| -rw-r--r-- | 5408 | root |
root |
/usr/share/man/man8/ausearch.8.xz
|
| -rw-r--r-- | 1260 | root |
root |
/usr/share/man/man8/ausyscall.8.xz
|
| -rw-r--r-- | 748 | root |
root |
/usr/share/man/man8/autrace.8.xz
|
| -r-sr-sr-- | 1780 | root |
root |
/usr/share/man/man8/auvirt.8.xz
|
| drwx------ | 0 | root |
root |
/var/log/audit
|
