All audit logs must be owned by root user and group. By default, the path for audit log is /var/log/audit/
.
To properly set the owner of /var/log/audit, run the command:
$ sudo chown root /var/log/audit
To properly set the owner of /var/log/audit/*, run the command:
$ sudo chown root /var/log/audit/*