%FILES%
etc/
etc/audit/
etc/audit/audisp-remote.conf
etc/audit/audit-stop.rules
etc/audit/auditd.conf
etc/audit/plugins.d/
etc/audit/plugins.d/af_unix.conf
etc/audit/plugins.d/au-remote.conf
etc/audit/plugins.d/audispd-zos-remote.conf
etc/audit/plugins.d/syslog.conf
etc/audit/zos-remote.conf
etc/libaudit.conf
usr/
usr/bin/
usr/bin/audisp-remote
usr/bin/audisp-syslog
usr/bin/audispd-zos-remote
usr/bin/auditctl
usr/bin/auditd
usr/bin/augenrules
usr/bin/aulast
usr/bin/aulastlog
usr/bin/aureport
usr/bin/ausearch
usr/bin/ausyscall
usr/bin/autrace
usr/bin/auvirt
usr/include/
usr/include/auparse-defs.h
usr/include/auparse.h
usr/include/libaudit.h
usr/lib/
usr/lib/libaudit.so
usr/lib/libaudit.so.1
usr/lib/libaudit.so.1.0.0
usr/lib/libauparse.so
usr/lib/libauparse.so.0
usr/lib/libauparse.so.0.0.0
usr/lib/pkgconfig/
usr/lib/pkgconfig/audit.pc
usr/lib/pkgconfig/auparse.pc
usr/lib/systemd/
usr/lib/systemd/system/
usr/lib/systemd/system/auditd.service
usr/share/
usr/share/aclocal/
usr/share/aclocal/audit.m4
usr/share/audit/
usr/share/audit/sample-rules/
usr/share/audit/sample-rules/10-base-config.rules
usr/share/audit/sample-rules/10-no-audit.rules
usr/share/audit/sample-rules/11-loginuid.rules
usr/share/audit/sample-rules/12-cont-fail.rules
usr/share/audit/sample-rules/12-ignore-error.rules
usr/share/audit/sample-rules/20-dont-audit.rules
usr/share/audit/sample-rules/21-no32bit.rules
usr/share/audit/sample-rules/22-ignore-chrony.rules
usr/share/audit/sample-rules/23-ignore-filesystems.rules
usr/share/audit/sample-rules/30-nispom.rules
usr/share/audit/sample-rules/30-ospp-v42-1-create-failed.rules
usr/share/audit/sample-rules/30-ospp-v42-1-create-success.rules
usr/share/audit/sample-rules/30-ospp-v42-2-modify-failed.rules
usr/share/audit/sample-rules/30-ospp-v42-2-modify-success.rules
usr/share/audit/sample-rules/30-ospp-v42-3-access-failed.rules
usr/share/audit/sample-rules/30-ospp-v42-3-access-success.rules
usr/share/audit/sample-rules/30-ospp-v42-4-delete-failed.rules
usr/share/audit/sample-rules/30-ospp-v42-4-delete-success.rules
usr/share/audit/sample-rules/30-ospp-v42-5-perm-change-failed.rules
usr/share/audit/sample-rules/30-ospp-v42-5-perm-change-success.rules
usr/share/audit/sample-rules/30-ospp-v42-6-owner-change-failed.rules
usr/share/audit/sample-rules/30-ospp-v42-6-owner-change-success.rules
usr/share/audit/sample-rules/30-ospp-v42.rules
usr/share/audit/sample-rules/30-pci-dss-v31.rules
usr/share/audit/sample-rules/30-stig.rules
usr/share/audit/sample-rules/31-privileged.rules
usr/share/audit/sample-rules/32-power-abuse.rules
usr/share/audit/sample-rules/40-local.rules
usr/share/audit/sample-rules/41-containers.rules
usr/share/audit/sample-rules/42-injection.rules
usr/share/audit/sample-rules/43-module-load.rules
usr/share/audit/sample-rules/44-installers.rules
usr/share/audit/sample-rules/70-einval.rules
usr/share/audit/sample-rules/71-networking.rules
usr/share/audit/sample-rules/99-finalize.rules
usr/share/audit/sample-rules/README-rules
usr/share/man/
usr/share/man/man3/
usr/share/man/man3/audit_action_to_name.3.gz
usr/share/man/man3/audit_add_rule_data.3.gz
usr/share/man/man3/audit_add_watch.3.gz
usr/share/man/man3/audit_close.3.gz
usr/share/man/man3/audit_delete_rule_data.3.gz
usr/share/man/man3/audit_detect_machine.3.gz
usr/share/man/man3/audit_encode_nv_string.3.gz
usr/share/man/man3/audit_encode_value.3.gz
usr/share/man/man3/audit_flag_to_name.3.gz
usr/share/man/man3/audit_fstype_to_name.3.gz
usr/share/man/man3/audit_get_reply.3.gz
usr/share/man/man3/audit_get_session.3.gz
usr/share/man/man3/audit_getloginuid.3.gz
usr/share/man/man3/audit_is_enabled.3.gz
usr/share/man/man3/audit_log_acct_message.3.gz
usr/share/man/man3/audit_log_semanage_message.3.gz
usr/share/man/man3/audit_log_user_avc_message.3.gz
usr/share/man/man3/audit_log_user_comm_message.3.gz
usr/share/man/man3/audit_log_user_command.3.gz
usr/share/man/man3/audit_log_user_message.3.gz
usr/share/man/man3/audit_name_to_action.3.gz
usr/share/man/man3/audit_name_to_errno.3.gz
usr/share/man/man3/audit_name_to_flag.3.gz
usr/share/man/man3/audit_name_to_fstype.3.gz
usr/share/man/man3/audit_name_to_syscall.3.gz
usr/share/man/man3/audit_open.3.gz
usr/share/man/man3/audit_request_rules_list_data.3.gz
usr/share/man/man3/audit_request_signal_info.3.gz
usr/share/man/man3/audit_request_status.3.gz
usr/share/man/man3/audit_set_backlog_limit.3.gz
usr/share/man/man3/audit_set_backlog_wait_time.3.gz
usr/share/man/man3/audit_set_enabled.3.gz
usr/share/man/man3/audit_set_failure.3.gz
usr/share/man/man3/audit_set_pid.3.gz
usr/share/man/man3/audit_set_rate_limit.3.gz
usr/share/man/man3/audit_setloginuid.3.gz
usr/share/man/man3/audit_syscall_to_name.3.gz
usr/share/man/man3/audit_update_watch_perms.3.gz
usr/share/man/man3/audit_value_needs_encoding.3.gz
usr/share/man/man3/auparse_add_callback.3.gz
usr/share/man/man3/auparse_destroy.3.gz
usr/share/man/man3/auparse_feed.3.gz
usr/share/man/man3/auparse_feed_age_events.3.gz
usr/share/man/man3/auparse_feed_has_data.3.gz
usr/share/man/man3/auparse_find_field.3.gz
usr/share/man/man3/auparse_find_field_next.3.gz
usr/share/man/man3/auparse_first_field.3.gz
usr/share/man/man3/auparse_first_record.3.gz
usr/share/man/man3/auparse_flush_feed.3.gz
usr/share/man/man3/auparse_get_field_int.3.gz
usr/share/man/man3/auparse_get_field_name.3.gz
usr/share/man/man3/auparse_get_field_num.3.gz
usr/share/man/man3/auparse_get_field_str.3.gz
usr/share/man/man3/auparse_get_field_type.3.gz
usr/share/man/man3/auparse_get_filename.3.gz
usr/share/man/man3/auparse_get_line_number.3.gz
usr/share/man/man3/auparse_get_milli.3.gz
usr/share/man/man3/auparse_get_node.3.gz
usr/share/man/man3/auparse_get_num_fields.3.gz
usr/share/man/man3/auparse_get_num_records.3.gz
usr/share/man/man3/auparse_get_record_num.3.gz
usr/share/man/man3/auparse_get_record_text.3.gz
usr/share/man/man3/auparse_get_serial.3.gz
usr/share/man/man3/auparse_get_time.3.gz
usr/share/man/man3/auparse_get_timestamp.3.gz
usr/share/man/man3/auparse_get_type.3.gz
usr/share/man/man3/auparse_get_type_name.3.gz
usr/share/man/man3/auparse_goto_field_num.3.gz
usr/share/man/man3/auparse_goto_record_num.3.gz
usr/share/man/man3/auparse_init.3.gz
usr/share/man/man3/auparse_interpret_field.3.gz
usr/share/man/man3/auparse_new_buffer.3.gz
usr/share/man/man3/auparse_next_event.3.gz
usr/share/man/man3/auparse_next_field.3.gz
usr/share/man/man3/auparse_next_record.3.gz
usr/share/man/man3/auparse_node_compare.3.gz
usr/share/man/man3/auparse_normalize.3.gz
usr/share/man/man3/auparse_normalize_functions.3.gz
usr/share/man/man3/auparse_reset.3.gz
usr/share/man/man3/auparse_set_eoe_timeout.3.gz
usr/share/man/man3/auparse_set_escape_mode.3.gz
usr/share/man/man3/auparse_timestamp_compare.3.gz
usr/share/man/man3/ausearch_add_expression.3.gz
usr/share/man/man3/ausearch_add_interpreted_item.3.gz
usr/share/man/man3/ausearch_add_item.3.gz
usr/share/man/man3/ausearch_add_regex.3.gz
usr/share/man/man3/ausearch_add_timestamp_item.3.gz
usr/share/man/man3/ausearch_add_timestamp_item_ex.3.gz
usr/share/man/man3/ausearch_clear.3.gz
usr/share/man/man3/ausearch_next_event.3.gz
usr/share/man/man3/ausearch_set_stop.3.gz
usr/share/man/man3/get_auditfail_action.3.gz
usr/share/man/man3/set_aumessage_mode.3.gz
usr/share/man/man5/
usr/share/man/man5/audisp-remote.conf.5.gz
usr/share/man/man5/auditd-plugins.5.gz
usr/share/man/man5/auditd.conf.5.gz
usr/share/man/man5/ausearch-expression.5.gz
usr/share/man/man5/libaudit.conf.5.gz
usr/share/man/man5/zos-remote.conf.5.gz
usr/share/man/man7/
usr/share/man/man7/audit.rules.7.gz
usr/share/man/man8/
usr/share/man/man8/audisp-remote.8.gz
usr/share/man/man8/audisp-syslog.8.gz
usr/share/man/man8/audispd-zos-remote.8.gz
usr/share/man/man8/auditctl.8.gz
usr/share/man/man8/auditd.8.gz
usr/share/man/man8/augenrules.8.gz
usr/share/man/man8/aulast.8.gz
usr/share/man/man8/aulastlog.8.gz
usr/share/man/man8/aureport.8.gz
usr/share/man/man8/ausearch.8.gz
usr/share/man/man8/ausyscall.8.gz
usr/share/man/man8/autrace.8.gz
usr/share/man/man8/auvirt.8.gz
var/
var/log/
var/log/audit/

%BACKUP%
etc/libaudit.conf	cdc703f9d27f0d980271a9e95d0f18b2
etc/audit/audit-stop.rules	45dc8b93a8b644d96197dc87b7b2b392
etc/audit/auditd.conf	f87a9480f14adc13605b7b14b7df7dda
etc/audit/audisp-remote.conf	6b9a1cdd94c4bbd6412277d53d88b219
etc/audit/zos-remote.conf	871bbe04101ff19cf1baa0dd300c76ec
etc/audit/plugins.d/af_unix.conf	199eaa1e43fa9139f0910bdb64fd219e
etc/audit/plugins.d/au-remote.conf	c97f7343a01785d632ac0af79af4d9c8
etc/audit/plugins.d/audispd-zos-remote.conf	3ceb5890f2d922aded7e7e2a372c4175
etc/audit/plugins.d/syslog.conf	a875ad75978db40352cf4e4ed21e468e