#!/bin/sh -e # Remove watches so shutdown works cleanly test -f /etc/audit/audit-stop.rules || exit 0 test ! -r ./conf || . ./conf case "$AUDITD_CLEAN_STOP" in no|NO) exit 0 ;; *) ;; esac exec auditctl -R /etc/audit/audit-stop.rules >/dev/null