赞
踩
(1)配置 vim /usr/lib/systemd/system/auditd.service RefuseManualStop=no (2)重启daemon systemctl daemon-reload (3)停止auditd.service审计服务 systemctl stop auditd.service