ꦫꦣꦺꦤ꧀ꦄꦤ꧀ꦠꦱꦺꦤ

PATH: etc / systemd / system / multi-user.target.wants

[Unit]
Description=Security Auditing Service
DefaultDependencies=no
## If auditd is sending or recieving remote logging, copy this file to
## /etc/systemd/system/auditd.service and comment out the first After and
## uncomment the second so that network-online.target is part of After.
## then comment the first Before and uncomment the second Before to remove
## sysinit.target from "Before".
## If using remote logging, ensure that the systemd-update-utmp.service file
## is updated to remove the After=auditd.service directive to prevent a
## boot-time ordering cycle.
After=local-fs.target systemd-tmpfiles-setup.service
##After=network-online.target local-fs.target systemd-tmpfiles-setup.service
Before=sysinit.target shutdown.target
##Before=shutdown.target
Conflicts=shutdown.target
RefuseManualStop=yes
ConditionKernelCommandLine=!audit=0
ConditionKernelCommandLine=!audit=off

Documentation=man:auditd(8) https://github.com/linux-audit/audit-documentation

[Service]
Type=forking
PIDFile=/run/auditd.pid
ExecStart=/sbin/auditd
## To not use augenrules, copy this file to /etc/systemd/system/auditd.service
## and comment/delete the next line and uncomment the auditctl line.
## NOTE: augenrules expect any rules to be added to /etc/audit/rules.d/
ExecStartPost=-/sbin/augenrules --load
#ExecStartPost=-/sbin/auditctl -R /etc/audit/audit.rules
# By default we don't clear the rules on exit. To enable this, uncomment
# the next line after copying the file to /etc/systemd/system/auditd.service
#ExecStopPost=/sbin/auditctl -R /etc/audit/audit-stop.rules
Restart=on-failure
# Do not restart for intentional exits. See EXIT CODES section in auditd(8).
RestartPreventExitStatus=2 4 6

### Security Settings ###
MemoryDenyWriteExecute=true
LockPersonality=true
# The following control prevents rules on /proc so its off by default
#ProtectControlGroups=true
## The following control prevents rules on /usr/lib/modules/ its off by default
#ProtectKernelModules=true
RestrictRealtime=true

[Install]
WantedBy=multi-user.target

[-] sssd.service [edit]
[-] cpanel.service [edit]
[-] fastmail.service [edit]
[-] ea-php83-php-fpm.service [edit]
[-] mcelog.service [edit]
[-] imunify-notifier.service [edit]
[-] securetmp.service [edit]
[-] pure-ftpd.service [edit]
[-] ipaliases.service [edit]
[-] ea-php81-php-fpm.service [edit]
[-] auditd.service [edit]
[-] pm2-root.service [edit]
[-] sshd.service [edit]
[-] sysstat.service [edit]
[-] nfs-client.target [edit]
[-] mdmonitor.service [edit]
[-] lfd.service [edit]
[-] cpanel-onboot.service [edit]
[-] crond.service [edit]
[-] libstoragemgmt.service [edit]
[-] csf.service [edit]
[-] kdump.service [edit]
[-] NetworkManager.service [edit]
[-] imunify-antivirus.service [edit]
[-] wp-toolkit-scheduled-tasks.service [edit]
[-] exim.service [edit]
[-] hw_check.service [edit]
[-] imunify-agent-proxy.service [edit]
[+] ..
[-] atd.service [edit]
[-] tuned.service [edit]
[-] ea-php84-php-fpm.service [edit]
[-] remote-fs.target [edit]
[-] wp-toolkit-background-tasks.service [edit]
[-] smartd.service [edit]
[-] aibolit-resident.service [edit]
[-] rpcbind.service [edit]
[-] clamd.service [edit]
[-] mailman.service [edit]
[-] dovecot.service [edit]
[-] pdns.service [edit]
[-] irqbalance.service [edit]
[-] rsyslog.service [edit]
[-] sw-engine.service [edit]
[-] chronyd.service [edit]
[-] ea-php82-php-fpm.service [edit]
[-] pure-authd.service [edit]
[-] cpipv6.service [edit]
[-] nscd.service [edit]
[-] cpanelquotaonboot.service [edit]
[-] mariadb.service [edit]
[-] httpd.service [edit]