audit.rules keeps going blank
I added the stig.rules config file from /usr/share/doc/audit-version/stig.rules to /etc/audit/audit.rules, and audit.rules was blank a day later.
How do I keep the rules persistent across reboots?
I followed the guidance in this link, to no avail -
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Security_Guide/sec-Defining_Audit_Rules_and_Controls_in_the_audit.rules_file.html
PG