init.d/auditd.service

   1 [Unit]
   2 Description=Security Auditing Service
   3 DefaultDependencies=no
   4 After=local-fs.target systemd-tmpfiles-setup.service
   5 Conflicts=shutdown.target
   6 Before=sysinit.target shutdown.target
   7 RefuseManualStop=yes
   8 ConditionKernelCommandLine=!audit=0
   9
  10 [Service]
  11 ExecStart=/sbin/auditd -n
  12 ## To use augenrules, copy this file to /etc/systemd/system/auditd.service
  13 ## and uncomment the next line and delete/comment out the auditctl line.
  14 ## Then copy existing rules to /etc/audit/rules.d/
  15 ## Not doing this last step can cause loss of existing rules
  16 #ExecStartPost=-/sbin/augenrules --load
  17 ExecStartPost=-/sbin/auditctl -R /etc/audit/audit.rules
  18 ExecReload=/bin/kill -HUP $MAINPID
  19
  20 [Install]
  21 WantedBy=multi-user.target
  22