[Service] # Do not run augenrules; read audit rules from the audit.rules file as # it exists already. Audit rules are generated at build time. ExecStartPost= ExecStartPost=-/sbin/auditctl -R /etc/audit/audit.rules