Blame SOURCES/audit-2.3.3-augenrules.patch

ade036
diff -urp audit-2.3.3.orig/init.d/auditd.service audit-2.3.3/init.d/auditd.service
ade036
--- audit-2.3.3.orig/init.d/auditd.service	2014-01-16 06:24:42.000000000 -0500
ade036
+++ audit-2.3.3/init.d/auditd.service	2014-03-18 12:47:13.682617960 -0400
ade036
@@ -8,12 +8,11 @@ RefuseManualStop=yes
ade036
 
ade036
 [Service]
ade036
 ExecStart=/sbin/auditd -n
ade036
-## To use augenrules, copy this file to /etc/systemd/system/auditd.service
ade036
-## and uncomment the next line and delete/comment out the auditctl line.
ade036
-## Then copy existing rules to /etc/audit/rules.d/
ade036
-## Not doing this last step can cause loss of existing rules
ade036
-#ExecStartPost=-/sbin/augenrules --load
ade036
-ExecStartPost=-/sbin/auditctl -R /etc/audit/audit.rules
ade036
+## To not use augenrules, copy this file to /etc/systemd/system/auditd.service
ade036
+## and comment/delete the next line and uncomment the auditctl line.
ade036
+## NOTE: augenrules expect any rules to be added to /etc/audit/rules.d/
ade036
+ExecStartPost=-/sbin/augenrules --load
ade036
+#ExecStartPost=-/sbin/auditctl -R /etc/audit/audit.rules
ade036
 ExecReload=/bin/kill -HUP $MAINPID
ade036
 
ade036
 [Install]