| DIR: /usr/share/audit/sample-rules /usr/share/audit/sample-rules/ |
| Current File : /usr/share/audit/sample-rules/40-local.rules |
## Put your own watches after this point # -a exit,always -F arch=b64 -F path=file -F perm=rwxa -F key=text # -a exit,always -F arch=b64 -F dir=directory -F perm=rwxa -F key=text |