2 Description=Security Auditing Service
5 Conflicts=shutdown.target
6 Before=sysinit.target shutdown.target
7 After=systemd-tmpfiles-setup.service
10 ExecStart=/sbin/auditd -n
11 ## To use augenrules, copy this file to /etc/systemd/system/auditd.service
12 ## and uncomment the next line and delete/comment out the auditctl line.
13 ## Then copy existing rules to /etc/audit/rules.d/
14 ## Not doing this last step can cause loss of existing rules
15 #ExecStartPost=-/sbin/augenrules --load
16 ExecStartPost=-/sbin/auditctl -R /etc/audit/audit.rules
17 ExecReload=/bin/kill -HUP $MAINPID
20 WantedBy=multi-user.target