auditd service is re-enabled when audit package is updated

Issue

• In the environment where the user stops and disables the auditd.service and the auditd package gets updated later within yum update procedure, the service gets re-enabled and started again. This seems to be triggered by the code which the package runs:

> %postun
> if [ $1 -ge 1 ]; then
>    /sbin/service auditd condrestart > /dev/null 2>&1 || :
> fi