PN: audit
PV: 4.0.1
PR: r0
PKGV: 4.0.1
PKGR: r0@EXTENDPRAUTO@
LICENSE: GPL-2.0-or-later & LGPL-2.0-or-later
DESCRIPTION: The audit package contains the user space utilities for storing and searching the audit records generated by the audit subsystem in the Linux kernel.
SUMMARY: User space tools for kernel auditing
RDEPENDS:auditd: audit (>= 4.0.1) glibc (>= 2.39+git6+b027d5b145) libcap-ng (>= 0.8.5) libwrap (>= 7.6)
SECTION: base
PKG:auditd: auditd
FILES:auditd: /usr/bin/* /usr/sbin/* /etc/* /usr/share/audit-rules/* /usr/libexec/* /usr/lib/systemd/system-preset/98-auditd.preset /usr/lib/systemd/system/auditd.service /usr/lib/systemd/system/audit-rules.service
CONFFILES:auditd: /etc/audit/audit.rules
FILES_INFO:auditd: {"/etc/audit/audisp-filter.conf": 302, "/etc/audit/audit-stop.rules": 127, "/etc/audit/audit.rules": 244, "/etc/audit/auditd.conf": 882, "/etc/audit/plugins.d/af_unix.conf": 359, "/etc/audit/plugins.d/filter.conf": 623, "/etc/audit/rules.d/audit.rules": 244, "/etc/tmpfiles.d/audit.conf": 35, "/usr/bin/aulast": 18472, "/usr/bin/aulastlog": 14376, "/usr/bin/ausyscall": 14376, "/usr/lib/systemd/system-preset/98-auditd.preset": 49, "/usr/lib/systemd/system/audit-rules.service": 939, "/usr/lib/systemd/system/auditd.service": 1710, "/usr/libexec/initscripts/legacy-actions/auditd/condrestart": 299, "/usr/libexec/initscripts/legacy-actions/auditd/reload": 288, "/usr/libexec/initscripts/legacy-actions/auditd/restart": 311, "/usr/libexec/initscripts/legacy-actions/auditd/resume": 284, "/usr/libexec/initscripts/legacy-actions/auditd/rotate": 281, "/usr/libexec/initscripts/legacy-actions/auditd/state": 474, "/usr/libexec/initscripts/legacy-actions/auditd/stop": 260, "/usr/sbin/audisp-af_unix": 14400, "/usr/sbin/audisp-filter": 22632, "/usr/sbin/auditctl": 47240, "/usr/sbin/auditd": 141496, "/usr/sbin/augenrules": 4142, "/usr/sbin/aureport": 121024, "/usr/sbin/ausearch": 133328, "/usr/share/audit-rules/10-base-config.rules": 244, "/usr/share/audit-rules/10-no-audit.rules": 284, "/usr/share/audit-rules/11-loginuid.rules": 93, "/usr/share/audit-rules/12-cont-fail.rules": 333, "/usr/share/audit-rules/12-ignore-error.rules": 327, "/usr/share/audit-rules/20-dont-audit.rules": 516, "/usr/share/audit-rules/21-no32bit.rules": 273, "/usr/share/audit-rules/22-ignore-chrony.rules": 254, "/usr/share/audit-rules/23-ignore-filesystems.rules": 507, "/usr/share/audit-rules/30-ospp-v42-1-create-failed.rules": 1500, "/usr/share/audit-rules/30-ospp-v42-1-create-success.rules": 746, "/usr/share/audit-rules/30-ospp-v42-2-modify-failed.rules": 1646, "/usr/share/audit-rules/30-ospp-v42-2-modify-success.rules": 826, "/usr/share/audit-rules/30-ospp-v42-3-access-failed.rules": 625, "/usr/share/audit-rules/30-ospp-v42-3-access-success.rules": 399, "/usr/share/audit-rules/30-ospp-v42-4-delete-failed.rules": 562, "/usr/share/audit-rules/30-ospp-v42-4-delete-success.rules": 284, "/usr/share/audit-rules/30-ospp-v42-5-perm-change-failed.rules": 816, "/usr/share/audit-rules/30-ospp-v42-5-perm-change-success.rules": 414, "/usr/share/audit-rules/30-ospp-v42-6-owner-change-failed.rules": 579, "/usr/share/audit-rules/30-ospp-v42-6-owner-change-success.rules": 295, "/usr/share/audit-rules/30-ospp-v42.rules": 9317, "/usr/share/audit-rules/30-pci-dss-v31.rules": 8380, "/usr/share/audit-rules/30-stig.rules": 9473, "/usr/share/audit-rules/31-privileged.rules": 1599, "/usr/share/audit-rules/32-power-abuse.rules": 213, "/usr/share/audit-rules/40-local.rules": 180, "/usr/share/audit-rules/41-containers.rules": 439, "/usr/share/audit-rules/42-injection.rules": 672, "/usr/share/audit-rules/43-module-load.rules": 398, "/usr/share/audit-rules/44-installers.rules": 1264, "/usr/share/audit-rules/70-einval.rules": 326, "/usr/share/audit-rules/71-networking.rules": 151, "/usr/share/audit-rules/99-finalize.rules": 86, "/usr/share/audit-rules/README-rules": 1421}
pkg_postinst:auditd: #!/bin/sh\nset -e\nif systemctl >/dev/null 2>/dev/null; then\n\tOPTS=""\n\n\tif [ -n "$D" ]; then\n\t\tOPTS="--root=$D"\n\tfi\n\n\tif [ "enable" = "enable" ]; then\n\t\tfor service in auditd.service audit-rules.service; do\n\t\t\tsystemctl ${OPTS} enable "$service"\n\t\tdone\n\tfi\n\n\tif [ -z "$D" ]; then\n\t\tsystemctl daemon-reload\n\t\tsystemctl preset auditd.service audit-rules.service\n\n\t\tif [ "enable" = "enable" ]; then\n\t\t\tsystemctl --no-block restart auditd.service audit-rules.service\n\t\tfi\n\tfi\nfi\n
pkg_prerm:auditd: #!/bin/sh\nset -e\nif systemctl >/dev/null 2>/dev/null; then\n\tif [ -z "$D" ]; then\n\t\tsystemctl stop auditd.service audit-rules.service\n\n\t\tsystemctl disable auditd.service audit-rules.service\n\tfi\nfi\n
FILERDEPENDSFLIST:auditd: /usr/bin/aulast /usr/bin/aulastlog /usr/bin/ausyscall /usr/libexec/initscripts/legacy-actions/auditd/condrestart /usr/libexec/initscripts/legacy-actions/auditd/reload /usr/libexec/initscripts/legacy-actions/auditd/restart /usr/libexec/initscripts/legacy-actions/auditd/resume /usr/libexec/initscripts/legacy-actions/auditd/rotate /usr/libexec/initscripts/legacy-actions/auditd/state /usr/libexec/initscripts/legacy-actions/auditd/stop /usr/sbin/audisp-af@underscore@unix /usr/sbin/audisp-filter /usr/sbin/auditctl /usr/sbin/auditd /usr/sbin/augenrules /usr/sbin/aureport /usr/sbin/ausearch
FILERDEPENDS:/usr/bin/aulast:auditd:  libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.34)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libauparse.so.0()(64bit) libc.so.6()(64bit) rtld(GNU_HASH)
FILERDEPENDS:/usr/bin/aulastlog:auditd:  libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.34)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libauparse.so.0()(64bit) libc.so.6()(64bit) rtld(GNU_HASH)
FILERDEPENDS:/usr/bin/ausyscall:auditd:  libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.38)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.34)(64bit) libaudit.so.1()(64bit) libc.so.6()(64bit) rtld(GNU_HASH)
FILERDEPENDS:/usr/libexec/initscripts/legacy-actions/auditd/condrestart:auditd:  /bin/sh
FILERDEPENDS:/usr/libexec/initscripts/legacy-actions/auditd/reload:auditd:  /bin/sh
FILERDEPENDS:/usr/libexec/initscripts/legacy-actions/auditd/restart:auditd:  /bin/sh
FILERDEPENDS:/usr/libexec/initscripts/legacy-actions/auditd/resume:auditd:  /bin/sh
FILERDEPENDS:/usr/libexec/initscripts/legacy-actions/auditd/rotate:auditd:  /bin/sh
FILERDEPENDS:/usr/libexec/initscripts/legacy-actions/auditd/state:auditd:  /bin/sh
FILERDEPENDS:/usr/libexec/initscripts/legacy-actions/auditd/stop:auditd:  /bin/sh
FILERDEPENDS:/usr/sbin/audisp-af@underscore@unix:auditd:  libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.16)(64bit) libc.so.6(GLIBC_2.10)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.34)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.38)(64bit) libcap-ng.so.0()(64bit) libc.so.6()(64bit) rtld(GNU_HASH)
FILERDEPENDS:/usr/sbin/audisp-filter:auditd:  libc.so.6(GLIBC_2.33)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.34)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libauparse.so.0()(64bit) libcap-ng.so.0()(64bit) libc.so.6()(64bit) rtld(GNU_HASH)
FILERDEPENDS:/usr/sbin/auditctl:auditd:  libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.33)(64bit) libc.so.6(GLIBC_2.8)(64bit) libc.so.6(GLIBC_2.15)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.34)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.38)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libaudit.so.1()(64bit) libauparse.so.0()(64bit) libc.so.6()(64bit) rtld(GNU_HASH)
FILERDEPENDS:/usr/sbin/auditd:auditd:  libc.so.6(GLIBC_2.9)(64bit) libc.so.6(GLIBC_2.32)(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.8)(64bit) libc.so.6(GLIBC_2.33)(64bit) libc.so.6(GLIBC_2.15)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.7)(64bit) libc.so.6(GLIBC_2.3.2)(64bit) libc.so.6(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.34)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.38)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3)(64bit) libwrap.so.0()(64bit) libaudit.so.1()(64bit) libauparse.so.0()(64bit) libc.so.6()(64bit) rtld(GNU_HASH)
FILERDEPENDS:/usr/sbin/augenrules:auditd:  /bin/sh
FILERDEPENDS:/usr/sbin/aureport:auditd:  libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.33)(64bit) libc.so.6(GLIBC_2.8)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.7)(64bit) libc.so.6(GLIBC_2.34)(64bit) libc.so.6(GLIBC_2.38)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.3)(64bit) libaudit.so.1()(64bit) libauparse.so.0()(64bit) libc.so.6()(64bit) rtld(GNU_HASH)
FILERDEPENDS:/usr/sbin/ausearch:auditd:  libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.33)(64bit) libc.so.6(GLIBC_2.8)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.7)(64bit) libc.so.6(GLIBC_2.34)(64bit) libc.so.6(GLIBC_2.38)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.3)(64bit) libaudit.so.1()(64bit) libauparse.so.0()(64bit) libc.so.6()(64bit) rtld(GNU_HASH)
PKGSIZE:auditd: 584639
