auditd does not save rules and overrides the edited rules after each deamon restart

Issue

This Content is from ask ubuntu. Question asked by thecow milk

I have auditd in Ubuntu and I’m trying to apply some rules but everytime I edit audit.rules file and restart auditd deamon it generates a new file. How can I keep the same file?

Solution

This question is not yet answered, be the first one who answer using the comment. Later the confirmed answer will be published as the solution.

This Question and Answer are collected from askubuntu, is licensed under the terms of CC BY-SA 2.5. CC BY-SA 3.0. CC BY-SA 4.0.

people found this article helpful. What about you?