Status: IN
`auditd` must be managed with `service auditd start/stop/restart` — `systemctl` is only valid for `enable` and `status`.
Source: repo:entries/2026/03/04/en-documentation-red_hat_enterprise_linux-9-html-security_hardening-auditing-the.md
JSON