#!/bin/bash
# platform = multi_platform_all
# packages = audit

if LC_ALL=C grep -iw ^log_file /etc/audit/auditd.conf; then
  sed -i 's/^log_file.*//' /etc/audit/auditd.conf
fi

if LC_ALL=C grep -iw ^log_group /etc/audit/auditd.conf; then
  sed -i 's/^log_group.*//' /etc/audit/auditd.conf
fi

touch /var/log/audit/audit.log
chmod 0600 /var/log/audit/audit.log
