d /var/log/audit 0700 root root - -