PN: audit
PV: 3.0.8
PR: r0
PKGV: 3.0.8
PKGR: r0.68
LICENSE: GPL-2.0-or-later & LGPL-2.0-or-later
DESCRIPTION: The audit package contains the user space utilities for storing and searching the audit records generated by the audit subsystem in the Linux kernel.
SUMMARY: User space tools for kernel auditing
RDEPENDS:auditd: audit (>= 3.0.8) glibc (>= 2.35) libwrap (>= 7.6)
SECTION: base
PKG:auditd: auditd
FILES:auditd: /usr/bin/* /usr/sbin/* /etc/* /usr/share/audit/* /usr/lib/systemd/system-preset/98-auditd.preset /usr/lib/systemd/system/auditd.service
CONFFILES:auditd: /etc/audit/audit.rules
FILES_INFO:auditd: {"/etc/audit/audit-stop.rules": 127, "/etc/audit/audit.rules": 244, "/etc/audit/auditd.conf": 882, "/etc/audit/plugins.d/af_unix.conf": 358, "/etc/audit/rules.d/audit.rules": 244, "/etc/default/auditd": 892, "/etc/tmpfiles.d/audit-volatile.conf": 35, "/usr/bin/aulast": 18400, "/usr/bin/aulastlog": 10216, "/usr/bin/ausyscall": 10216, "/usr/bin/auvirt": 30768, "/usr/lib/systemd/system-preset/98-auditd.preset": 22, "/usr/lib/systemd/system/auditd.service": 860, "/usr/sbin/auditctl": 43192, "/usr/sbin/auditd": 145536, "/usr/sbin/augenrules": 3789, "/usr/sbin/aureport": 120952, "/usr/sbin/ausearch": 129160, "/usr/sbin/autrace": 14304, "/usr/share/audit/sample-rules/10-base-config.rules": 244, "/usr/share/audit/sample-rules/10-no-audit.rules": 284, "/usr/share/audit/sample-rules/11-loginuid.rules": 93, "/usr/share/audit/sample-rules/12-cont-fail.rules": 333, "/usr/share/audit/sample-rules/12-ignore-error.rules": 327, "/usr/share/audit/sample-rules/20-dont-audit.rules": 516, "/usr/share/audit/sample-rules/21-no32bit.rules": 273, "/usr/share/audit/sample-rules/22-ignore-chrony.rules": 254, "/usr/share/audit/sample-rules/23-ignore-filesystems.rules": 507, "/usr/share/audit/sample-rules/30-nispom.rules": 4943, "/usr/share/audit/sample-rules/30-ospp-v42-1-create-failed.rules": 1500, "/usr/share/audit/sample-rules/30-ospp-v42-1-create-success.rules": 746, "/usr/share/audit/sample-rules/30-ospp-v42-2-modify-failed.rules": 1646, "/usr/share/audit/sample-rules/30-ospp-v42-2-modify-success.rules": 826, "/usr/share/audit/sample-rules/30-ospp-v42-3-access-failed.rules": 625, "/usr/share/audit/sample-rules/30-ospp-v42-3-access-success.rules": 399, "/usr/share/audit/sample-rules/30-ospp-v42-4-delete-failed.rules": 562, "/usr/share/audit/sample-rules/30-ospp-v42-4-delete-success.rules": 284, "/usr/share/audit/sample-rules/30-ospp-v42-5-perm-change-failed.rules": 816, "/usr/share/audit/sample-rules/30-ospp-v42-5-perm-change-success.rules": 414, "/usr/share/audit/sample-rules/30-ospp-v42-6-owner-change-failed.rules": 579, "/usr/share/audit/sample-rules/30-ospp-v42-6-owner-change-success.rules": 295, "/usr/share/audit/sample-rules/30-ospp-v42.rules": 5509, "/usr/share/audit/sample-rules/30-pci-dss-v31.rules": 6179, "/usr/share/audit/sample-rules/30-stig.rules": 6624, "/usr/share/audit/sample-rules/31-privileged.rules": 1458, "/usr/share/audit/sample-rules/32-power-abuse.rules": 213, "/usr/share/audit/sample-rules/40-local.rules": 156, "/usr/share/audit/sample-rules/41-containers.rules": 439, "/usr/share/audit/sample-rules/42-injection.rules": 672, "/usr/share/audit/sample-rules/43-module-load.rules": 398, "/usr/share/audit/sample-rules/44-installers.rules": 584, "/usr/share/audit/sample-rules/70-einval.rules": 326, "/usr/share/audit/sample-rules/71-networking.rules": 151, "/usr/share/audit/sample-rules/99-finalize.rules": 86, "/usr/share/audit/sample-rules/README-rules": 1421}
pkg_postinst:auditd: #!/bin/sh\nset -e\nif systemctl >/dev/null 2>/dev/null; then\n\tOPTS=""\n\n\tif [ -n "$D" ]; then\n\t\tOPTS="--root=$D"\n\tfi\n\n\tif [ "enable" = "enable" ]; then\n\t\tfor service in auditd.service; do\n\t\t\tsystemctl ${OPTS} enable "$service"\n\t\tdone\n\tfi\n\n\tif [ -z "$D" ]; then\n\t\tsystemctl daemon-reload\n\t\tsystemctl preset auditd.service\n\n\t\tif [ "enable" = "enable" ]; then\n\t\t\tsystemctl --no-block restart auditd.service\n\t\tfi\n\tfi\nfi\n
pkg_prerm:auditd: #!/bin/sh\nset -e\nif systemctl >/dev/null 2>/dev/null; then\n\tif [ -z "$D" ]; then\n\t\tsystemctl stop auditd.service\n\n\t\tsystemctl disable auditd.service\n\tfi\nfi\n
FILERDEPENDSFLIST:auditd: /usr/bin/aulast /usr/bin/aulastlog /usr/bin/ausyscall /usr/bin/auvirt /usr/sbin/auditctl /usr/sbin/auditd /usr/sbin/augenrules /usr/sbin/aureport /usr/sbin/ausearch /usr/sbin/autrace
FILERDEPENDS:/usr/bin/aulast:auditd:  ld-linux-aarch64.so.1(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.34)(64bit) libauparse.so.0()(64bit) libc.so.6()(64bit) ld-linux-aarch64.so.1()(64bit) rtld(GNU_HASH)
FILERDEPENDS:/usr/bin/aulastlog:auditd:  ld-linux-aarch64.so.1(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.34)(64bit) libauparse.so.0()(64bit) libc.so.6()(64bit) ld-linux-aarch64.so.1()(64bit) rtld(GNU_HASH)
FILERDEPENDS:/usr/bin/ausyscall:auditd:  libc.so.6(GLIBC_2.34)(64bit) libc.so.6(GLIBC_2.17)(64bit) libaudit.so.1()(64bit) libc.so.6()(64bit) rtld(GNU_HASH)
FILERDEPENDS:/usr/bin/auvirt:auditd:  ld-linux-aarch64.so.1(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.34)(64bit) libc.so.6(GLIBC_2.17)(64bit) libauparse.so.0()(64bit) libc.so.6()(64bit) ld-linux-aarch64.so.1()(64bit) rtld(GNU_HASH)
FILERDEPENDS:/usr/sbin/auditctl:auditd:  ld-linux-aarch64.so.1(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.33)(64bit) libc.so.6(GLIBC_2.34)(64bit) libc.so.6(GLIBC_2.17)(64bit) libaudit.so.1()(64bit) libauparse.so.0()(64bit) libc.so.6()(64bit) ld-linux-aarch64.so.1()(64bit) rtld(GNU_HASH)
FILERDEPENDS:/usr/sbin/auditd:auditd:  ld-linux-aarch64.so.1(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.32)(64bit) libc.so.6(GLIBC_2.33)(64bit) libc.so.6(GLIBC_2.34)(64bit) libc.so.6(GLIBC_2.17)(64bit) libwrap.so.0()(64bit) libaudit.so.1()(64bit) libauparse.so.0()(64bit) libc.so.6()(64bit) ld-linux-aarch64.so.1()(64bit) rtld(GNU_HASH)
FILERDEPENDS:/usr/sbin/augenrules:auditd:  /bin/sh
FILERDEPENDS:/usr/sbin/aureport:auditd:  ld-linux-aarch64.so.1(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.33)(64bit) libc.so.6(GLIBC_2.34)(64bit) libc.so.6(GLIBC_2.17)(64bit) libaudit.so.1()(64bit) libauparse.so.0()(64bit) libc.so.6()(64bit) ld-linux-aarch64.so.1()(64bit) rtld(GNU_HASH)
FILERDEPENDS:/usr/sbin/ausearch:auditd:  ld-linux-aarch64.so.1(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.33)(64bit) libc.so.6(GLIBC_2.34)(64bit) libc.so.6(GLIBC_2.17)(64bit) libaudit.so.1()(64bit) libauparse.so.0()(64bit) libc.so.6()(64bit) ld-linux-aarch64.so.1()(64bit) rtld(GNU_HASH)
FILERDEPENDS:/usr/sbin/autrace:auditd:  ld-linux-aarch64.so.1(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.34)(64bit) libc.so.6(GLIBC_2.17)(64bit) libaudit.so.1()(64bit) libc.so.6()(64bit) ld-linux-aarch64.so.1()(64bit) rtld(GNU_HASH)
PKGSIZE:auditd: 570879
