audit/systemd/auditd.service

   1 [Unit]
   2 Description=Security Auditing Service
   3 After=syslog.target
   4
   5 [Service]
   6 ExecStart=/sbin/auditd -n
   7 ExecStartPost=/sbin/auditctl -R /etc/audit/audit.rules
   8
   9 [Install]
  10 WantedBy=multi-user.target
  11