Test if augenrules is enabled for audit rules
multi_platform_all
Test if augenrules is enabled for audit rules.
{{% if product in ['rhel10', 'ol10'] %}}
/usr/lib/systemd/system/audit-rules.service
^ExecStart=(\/usr|)?\/sbin\/augenrules.*$
{{% else %}}
{{% if product in ['debian13'] %}}
/usr/lib/systemd/system/audit-rules.service
^ExecStart=\/usr\/sbin\/augenrules.*$
{{% else %}}
/usr/lib/systemd/system/auditd.service
^(ExecStartPost=\-\/sbin\/augenrules.*$|Requires=augenrules.service)
{{% endif %}}
{{% endif %}}
1