Ubuntu 22.04 Ensure 'write_logs' is configured with value 'yes' in /etc/audit/auditd.conf /etc/audit/auditd.conf ^[ \t]*(?i)write_logs(?-i)[ \t]*=[ \t]*(.+?)[ \t]*(?:$|#) 1 ^(?i)yes(?-i)$ /etc/audit/auditd.conf ^[ \t]*(?i)write_logs(?-i)[ \t]*=[ \t]* 1