diff --git a/shared/checks/oval/audit_rules_augenrules.xml b/shared/checks/oval/audit_rules_augenrules.xml index 7533f88e286..7b46a1c9f13 100644 --- a/shared/checks/oval/audit_rules_augenrules.xml +++ b/shared/checks/oval/audit_rules_augenrules.xml @@ -18,18 +18,19 @@ - {{% if product in ['fedora', 'rhel10', 'ol10'] %}} + {{% if product in ['rhel10', 'ol10'] %}} /usr/lib/systemd/system/audit-rules.service ^ExecStart=(\/usr|)?\/sbin\/augenrules.*$ + {{% elif product in ['fedora'] %}} + /usr/lib/systemd/system/audit-rules.service + ^ExecStart=\/usr\/bin\/augenrules.*$ + {{% elif product in ['debian13'] %}} + /usr/lib/systemd/system/audit-rules.service + ^ExecStart=\/usr\/sbin\/augenrules.*$ {{% else %}} - {{% if product in ['debian13'] %}} - /usr/lib/systemd/system/audit-rules.service - ^ExecStart=\/usr\/sbin\/augenrules.*$ - {{% else %}} - /usr/lib/systemd/system/auditd.service - ^(ExecStartPost=\-\/sbin\/augenrules.*$|Requires=augenrules.service) - {{% endif %}} -{{% endif %}} + /usr/lib/systemd/system/auditd.service + ^(ExecStartPost=\-\/sbin\/augenrules.*$|Requires=augenrules.service) + {{% endif %}} 1