## Make the loginuid immutable. This prevents tampering with the auid.
--loginuid-immutable

## Remove any existing rules
-D

## Buffer Size
# Feel free to increase this if the machine panic's
-b {{ auditd_buffer_size }}

## Failure Mode
# Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system)
-f {{ auditd_failure_mode }}