%FILES%
etc/
etc/audit/
etc/audit/audit-stop.rules
etc/audit/auditd.conf
etc/libaudit.conf
usr/
usr/bin/
usr/bin/auditctl
usr/bin/auditd
usr/bin/augenrules
usr/bin/aulast
usr/bin/aulastlog
usr/bin/aureport
usr/bin/ausearch
usr/bin/ausyscall
usr/include/
usr/include/audit-records.h
usr/include/audit_logging.h
usr/include/auparse-defs.h
usr/include/auparse.h
usr/include/auplugin.h
usr/include/libaudit.h
usr/lib/
usr/lib/libaudit.so
usr/lib/libaudit.so.1
usr/lib/libaudit.so.1.0.0
usr/lib/libauparse.so
usr/lib/libauparse.so.0
usr/lib/libauparse.so.0.0.0
usr/lib/libauplugin.so
usr/lib/libauplugin.so.1
usr/lib/libauplugin.so.1.0.0
usr/lib/pkgconfig/
usr/lib/pkgconfig/audit.pc
usr/lib/pkgconfig/auparse.pc
usr/lib/systemd/
usr/lib/systemd/system/
usr/lib/systemd/system/audit-rules.service
usr/lib/systemd/system/auditd.service
usr/lib/tmpfiles.d/
usr/lib/tmpfiles.d/audit.conf
usr/share/
usr/share/aclocal/
usr/share/aclocal/audit.m4
usr/share/audit-rules/
usr/share/audit-rules/10-base-config.rules
usr/share/audit-rules/10-no-audit.rules
usr/share/audit-rules/11-loginuid.rules
usr/share/audit-rules/12-cont-fail.rules
usr/share/audit-rules/12-ignore-error.rules
usr/share/audit-rules/20-dont-audit.rules
usr/share/audit-rules/21-no32bit.rules
usr/share/audit-rules/22-ignore-chrony.rules
usr/share/audit-rules/23-ignore-filesystems.rules
usr/share/audit-rules/30-ospp-v42-1-create-failed.rules
usr/share/audit-rules/30-ospp-v42-1-create-success.rules
usr/share/audit-rules/30-ospp-v42-2-modify-failed.rules
usr/share/audit-rules/30-ospp-v42-2-modify-success.rules
usr/share/audit-rules/30-ospp-v42-3-access-failed.rules
usr/share/audit-rules/30-ospp-v42-3-access-success.rules
usr/share/audit-rules/30-ospp-v42-4-delete-failed.rules
usr/share/audit-rules/30-ospp-v42-4-delete-success.rules
usr/share/audit-rules/30-ospp-v42-5-perm-change-failed.rules
usr/share/audit-rules/30-ospp-v42-5-perm-change-success.rules
usr/share/audit-rules/30-ospp-v42-6-owner-change-failed.rules
usr/share/audit-rules/30-ospp-v42-6-owner-change-success.rules
usr/share/audit-rules/30-ospp-v42.rules
usr/share/audit-rules/30-pci-dss-v31.rules
usr/share/audit-rules/30-stig.rules
usr/share/audit-rules/31-privileged.rules
usr/share/audit-rules/32-power-abuse.rules
usr/share/audit-rules/40-local.rules
usr/share/audit-rules/41-containers.rules
usr/share/audit-rules/42-injection.rules
usr/share/audit-rules/43-module-load.rules
usr/share/audit-rules/44-installers.rules
usr/share/audit-rules/70-einval.rules
usr/share/audit-rules/71-networking.rules
usr/share/audit-rules/99-finalize.rules
usr/share/audit-rules/README-rules
usr/share/audit-rules/ids-rules/
usr/share/audit-rules/ids-rules/25-connections.rules
usr/share/audit-rules/ids-rules/25-make-exec.rules
usr/share/audit-rules/ids-rules/25-recon.rules
usr/share/audit-rules/ids-rules/25-unpacking.rules
usr/share/bash-completion/
usr/share/bash-completion/completions/
usr/share/bash-completion/completions/audit
usr/share/doc/
usr/share/doc/audit/
usr/share/doc/audit/ChangeLog
usr/share/doc/audit/README.md
usr/share/doc/audit/SECURITY.md
usr/share/factory/
usr/share/factory/etc/
usr/share/factory/etc/audit/
usr/share/factory/etc/audit/audit-stop.rules
usr/share/factory/etc/audit/auditd.conf
usr/share/factory/etc/libaudit.conf
usr/share/man/
usr/share/man/man3/
usr/share/man/man3/audit_add_rule_data.3.gz
usr/share/man/man3/audit_add_watch.3.gz
usr/share/man/man3/audit_can_read.3.gz
usr/share/man/man3/audit_close.3.gz
usr/share/man/man3/audit_delete_rule_data.3.gz
usr/share/man/man3/audit_detect_machine.3.gz
usr/share/man/man3/audit_encode_nv_string.3.gz
usr/share/man/man3/audit_encode_value.3.gz
usr/share/man/man3/audit_flag_to_name.3.gz
usr/share/man/man3/audit_fstype_to_name.3.gz
usr/share/man/man3/audit_get_features.3.gz
usr/share/man/man3/audit_get_reply.3.gz
usr/share/man/man3/audit_get_session.3.gz
usr/share/man/man3/audit_getloginuid.3.gz
usr/share/man/man3/audit_is_enabled.3.gz
usr/share/man/man3/audit_log_acct_message.3.gz
usr/share/man/man3/audit_log_semanage_message.3.gz
usr/share/man/man3/audit_log_user_avc_message.3.gz
usr/share/man/man3/audit_log_user_comm_message.3.gz
usr/share/man/man3/audit_log_user_command.3.gz
usr/share/man/man3/audit_log_user_message.3.gz
usr/share/man/man3/audit_name_to_action.3.gz
usr/share/man/man3/audit_name_to_errno.3.gz
usr/share/man/man3/audit_name_to_flag.3.gz
usr/share/man/man3/audit_name_to_fstype.3.gz
usr/share/man/man3/audit_name_to_syscall.3.gz
usr/share/man/man3/audit_open.3.gz
usr/share/man/man3/audit_request_features.3.gz
usr/share/man/man3/audit_request_rules_list_data.3.gz
usr/share/man/man3/audit_request_signal_info.3.gz
usr/share/man/man3/audit_request_status.3.gz
usr/share/man/man3/audit_reset_backlog_wait_time_actual.3.gz
usr/share/man/man3/audit_reset_lost.3.gz
usr/share/man/man3/audit_set_backlog_limit.3.gz
usr/share/man/man3/audit_set_backlog_wait_time.3.gz
usr/share/man/man3/audit_set_enabled.3.gz
usr/share/man/man3/audit_set_failure.3.gz
usr/share/man/man3/audit_set_feature.3.gz
usr/share/man/man3/audit_set_loginuid_immutable.3.gz
usr/share/man/man3/audit_set_pid.3.gz
usr/share/man/man3/audit_set_rate_limit.3.gz
usr/share/man/man3/audit_setloginuid.3.gz
usr/share/man/man3/audit_syscall_to_name.3.gz
usr/share/man/man3/audit_update_watch_perms.3.gz
usr/share/man/man3/audit_value_needs_encoding.3.gz
usr/share/man/man3/auparse_add_callback.3.gz
usr/share/man/man3/auparse_destroy.3.gz
usr/share/man/man3/auparse_feed.3.gz
usr/share/man/man3/auparse_feed_age_events.3.gz
usr/share/man/man3/auparse_feed_has_data.3.gz
usr/share/man/man3/auparse_find_field.3.gz
usr/share/man/man3/auparse_find_field_next.3.gz
usr/share/man/man3/auparse_first_field.3.gz
usr/share/man/man3/auparse_first_record.3.gz
usr/share/man/man3/auparse_flush_feed.3.gz
usr/share/man/man3/auparse_get_field_int.3.gz
usr/share/man/man3/auparse_get_field_name.3.gz
usr/share/man/man3/auparse_get_field_num.3.gz
usr/share/man/man3/auparse_get_field_str.3.gz
usr/share/man/man3/auparse_get_field_type.3.gz
usr/share/man/man3/auparse_get_filename.3.gz
usr/share/man/man3/auparse_get_line_number.3.gz
usr/share/man/man3/auparse_get_milli.3.gz
usr/share/man/man3/auparse_get_node.3.gz
usr/share/man/man3/auparse_get_num_fields.3.gz
usr/share/man/man3/auparse_get_num_records.3.gz
usr/share/man/man3/auparse_get_record_num.3.gz
usr/share/man/man3/auparse_get_record_text.3.gz
usr/share/man/man3/auparse_get_serial.3.gz
usr/share/man/man3/auparse_get_time.3.gz
usr/share/man/man3/auparse_get_timestamp.3.gz
usr/share/man/man3/auparse_get_type.3.gz
usr/share/man/man3/auparse_get_type_name.3.gz
usr/share/man/man3/auparse_goto_field_num.3.gz
usr/share/man/man3/auparse_goto_record_num.3.gz
usr/share/man/man3/auparse_init.3.gz
usr/share/man/man3/auparse_interpret_field.3.gz
usr/share/man/man3/auparse_metrics.3.gz
usr/share/man/man3/auparse_new_buffer.3.gz
usr/share/man/man3/auparse_next_event.3.gz
usr/share/man/man3/auparse_next_field.3.gz
usr/share/man/man3/auparse_next_record.3.gz
usr/share/man/man3/auparse_node_compare.3.gz
usr/share/man/man3/auparse_normalize.3.gz
usr/share/man/man3/auparse_normalize_functions.3.gz
usr/share/man/man3/auparse_reset.3.gz
usr/share/man/man3/auparse_set_eoe_timeout.3.gz
usr/share/man/man3/auparse_set_escape_mode.3.gz
usr/share/man/man3/auparse_timestamp_compare.3.gz
usr/share/man/man3/auplugin.3.gz
usr/share/man/man3/auplugin_fgets.3.gz
usr/share/man/man3/ausearch_add_expression.3.gz
usr/share/man/man3/ausearch_add_interpreted_item.3.gz
usr/share/man/man3/ausearch_add_item.3.gz
usr/share/man/man3/ausearch_add_regex.3.gz
usr/share/man/man3/ausearch_add_timestamp_item.3.gz
usr/share/man/man3/ausearch_add_timestamp_item_ex.3.gz
usr/share/man/man3/ausearch_clear.3.gz
usr/share/man/man3/ausearch_cur_event.3.gz
usr/share/man/man3/ausearch_next_event.3.gz
usr/share/man/man3/ausearch_set_stop.3.gz
usr/share/man/man3/get_auditfail_action.3.gz
usr/share/man/man5/
usr/share/man/man5/auditd-plugins.5.gz
usr/share/man/man5/auditd.conf.5.gz
usr/share/man/man5/auditd.cron.5.gz
usr/share/man/man5/ausearch-expression.5.gz
usr/share/man/man5/libaudit.conf.5.gz
usr/share/man/man7/
usr/share/man/man7/audit.rules.7.gz
usr/share/man/man8/
usr/share/man/man8/auditctl.8.gz
usr/share/man/man8/auditd.8.gz
usr/share/man/man8/augenrules.8.gz
usr/share/man/man8/aulast.8.gz
usr/share/man/man8/aulastlog.8.gz
usr/share/man/man8/aureport.8.gz
usr/share/man/man8/ausearch.8.gz
usr/share/man/man8/ausyscall.8.gz
