Missing auditctl and augenrules tools in Rocky Linux 10.2 after installing the audit package

Rocky Linux Help & Support
1

Hello everyone,

I am currently testing Rocky Linux 10.2 (Red Quartz) and I have run into an issue regarding the audit package.

I have installed the audit and audit-libs packages, and verifying them with rpm confirms they are present on the system:
rpm -q audit audit-libs

audit-4.0.3-5.el10.x86_64
audit-libs-4.0.3-5.el10.x86_64

However, standard management tools such as auditctl and augenrules seem to be completely missing. They do not appear in bash autocomplete, and trying to run them directly or checking /usr/sbin/auditctl yields no results.

My questions are:

  1. Have these command-line tools been separated into a different sub-package in EL10 (e.g., audit-tools)?
  2. If so, what is the exact package name I need to install to get auditctl and augenrules working?

For context, I am running kernel 6.12.0-211.16.1.el10_2.0.1.x86_64. I am logged in as the root user with the correct $PATH.

Any guidance or clarification on how the audit framework is packaged in EL10 would be greatly appreciated.

Thank you in advance!

2

The below commands:

root@vault:~# dnf provides *bin/auditctl
audit-rules-4.0.3-5.el10.x86_64 : audit rules and utilities
Repo        : @System
Matched from:
Other       : *bin/auditctl

root@vault:~# dnf provides *bin/augenrules
audit-rules-4.0.3-5.el10.x86_64 : audit rules and utilities
Repo        : @System
Matched from:
Other       : *bin/augenrules

seem to show that you need the audit-rules package for those binaries.

3

Thanks for the info.