An XCCDF Rule
auditd
augenrules
.rules
/etc/audit/rules.d
--loginuid-immutable
auditctl
/etc/audit/audit.rules