Gecko [ georgetownmover.com ]

Name	Size	Permission	Date
NetworkManager.service	1.36 KB	-rw-r--r--	2026-04-07 17:45
auditd.service	1.98 KB	-rw-r--r--	2025-09-21 11:48
chronyd.service	1.43 KB	-rw-r--r--	2025-09-21 14:15
clamd.service	400 B	-rw-r--r--	2025-02-25 04:08
crond.service	371 B	-rw-r--r--	2025-09-25 11:43
csf.service	270 B	-rw-r--r--	2015-01-25 16:16
dovecot.service	340 B	-rw-r--r--	2025-02-25 04:06
exim.service	347 B	-rw-r--r--	2025-02-25 04:07
irqbalance.service	1.04 KB	-rw-r--r--	2025-09-21 10:36
kdump.service	442 B	-rw-r--r--	2025-09-24 06:15
lfd.service	226 B	-rw-r--r--	2025-02-28 10:18
lshttpd.service	653 B	-rw-r--r--	2025-02-25 04:01
mariadb.service	5.81 KB	-rw-r--r--	2025-02-25 04:02
named.service	859 B	-rw-r--r--	2026-04-15 05:39
remote-fs.target	530 B	-rw-r--r--	2022-10-31 18:59
rsyslog.service	999 B	-rw-r--r--	2025-09-21 13:08
spamassassin.service	283 B	-rw-r--r--	2024-10-02 23:09
sshd.service	372 B	-rw-r--r--	2026-04-02 15:48
sssd.service	768 B	-rw-r--r--	2025-11-27 15:35
sysstat.service	475 B	-rw-r--r--	2024-10-02 21:19
webuzo-onboot.service	285 B	-rw-r--r--	2026-04-16 10:32
webuzo.service	268 B	-rw-r--r--	2026-04-16 10:32

Rename

[Unit]
Description=Security Auditing Service
DefaultDependencies=no
## If auditd is sending or recieving remote logging, copy this file to
## /etc/systemd/system/auditd.service and comment out the first After and
## uncomment the second so that network-online.target is part of After.
## then comment the first Before and uncomment the second Before to remove
## sysinit.target from "Before".
## If using remote logging, ensure that the systemd-update-utmp.service file
## is updated to remove the After=auditd.service directive to prevent a
## boot-time ordering cycle.
After=local-fs.target systemd-tmpfiles-setup.service
##After=network-online.target local-fs.target systemd-tmpfiles-setup.service
Before=sysinit.target shutdown.target
##Before=shutdown.target
Conflicts=shutdown.target
RefuseManualStop=yes
ConditionKernelCommandLine=!audit=0
ConditionKernelCommandLine=!audit=off

Documentation=man:auditd(8) https://github.com/linux-audit/audit-documentation

[Service]
Type=forking
PIDFile=/run/auditd.pid
ExecStart=/sbin/auditd
## To not use augenrules, copy this file to /etc/systemd/system/auditd.service
## and comment/delete the next line and uncomment the auditctl line.
## NOTE: augenrules expect any rules to be added to /etc/audit/rules.d/
ExecStartPost=-/sbin/augenrules --load
#ExecStartPost=-/sbin/auditctl -R /etc/audit/audit.rules
# By default we don't clear the rules on exit. To enable this, uncomment
# the next line after copying the file to /etc/systemd/system/auditd.service
#ExecStopPost=/sbin/auditctl -R /etc/audit/audit-stop.rules
Restart=on-failure
# Do not restart for intentional exits. See EXIT CODES section in auditd(8).
RestartPreventExitStatus=2 4 6

### Security Settings ###
MemoryDenyWriteExecute=true
LockPersonality=true
# The following control prevents rules on /proc so its off by default
#ProtectControlGroups=true
## The following control prevents rules on /usr/lib/modules/ its off by default
#ProtectKernelModules=true
RestrictRealtime=true

[Install]
WantedBy=multi-user.target