root@master1:~$cat /etc/audit/audit.rules ## This file is automatically generated from /etc/audit/rules.d -D -b 8192 -f 1零时：auditctl -b 8192
