# Missing auditctl and augenrules tools in Rocky Linux 10.2 after installing the audit package

**URL:** <https://forums.rockylinux.org/t/missing-auditctl-and-augenrules-tools-in-rocky-linux-10-2-after-installing-the-audit-package/20634>\
**Category:** Rocky Linux Help & Support\
**Tags:** rocky-linux-10\
**Created:** [June 28, 2026, 6:42pm UTC](https://forums.rockylinux.org/t/missing-auditctl-and-augenrules-tools-in-rocky-linux-10-2-after-installing-the-audit-package/20634 "2026-06-28T18:42:42Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![linuxtehran](https://avatars.discourse-cdn.com/v4/letter/l/898d66/32.png) [@linuxtehran](https://forums.rockylinux.org/u/linuxtehran)\
**Post date:** [June 28, 2026, 6:42pm UTC](https://forums.rockylinux.org/t/missing-auditctl-and-augenrules-tools-in-rocky-linux-10-2-after-installing-the-audit-package/20634/1 "2026-06-28T18:42:42Z")

</div>

Hello everyone,

I am currently testing Rocky Linux 10.2 (Red Quartz) and I have run into an issue regarding the `audit` package.

I have installed the `audit` and `audit-libs` packages, and verifying them with `rpm` confirms they are present on the system:  
rpm -q audit audit-libs

audit-4.0.3-5.el10.x86\_64  
audit-libs-4.0.3-5.el10.x86\_64

However, standard management tools such as `auditctl` and `augenrules` seem to be completely missing. They do not appear in bash autocomplete, and trying to run them directly or checking `/usr/sbin/auditctl` yields no results.

My questions are:

1. Have these command-line tools been separated into a different sub-package in EL10 (e.g., `audit-tools`)?
2. If so, what is the exact package name I need to install to get `auditctl` and `augenrules` working?

For context, I am running kernel `6.12.0-211.16.1.el10_2.0.1.x86_64`. I am logged in as the root user with the correct `$PATH`.

Any guidance or clarification on how the `audit` framework is packaged in EL10 would be greatly appreciated.

Thank you in advance!

---

<div class="post-metadata">

**Author:** ![iwalker](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/iwalker/32/2599_2.png) [@iwalker](https://forums.rockylinux.org/u/iwalker)\
**Post date:** [June 28, 2026, 6:43pm UTC](https://forums.rockylinux.org/t/missing-auditctl-and-augenrules-tools-in-rocky-linux-10-2-after-installing-the-audit-package/20634/2 "2026-06-28T18:43:31Z")

</div>

The below commands:

```auto
root@vault:~# dnf provides *bin/auditctl
audit-rules-4.0.3-5.el10.x86_64 : audit rules and utilities
Repo : @System
Matched from:
Other : *bin/auditctl

root@vault:~# dnf provides *bin/augenrules
audit-rules-4.0.3-5.el10.x86_64 : audit rules and utilities
Repo : @System
Matched from:
Other : *bin/augenrules

```

seem to show that you need the `audit-rules` package for those binaries.

---

<div class="post-metadata">

**Author:** ![linuxtehran](https://avatars.discourse-cdn.com/v4/letter/l/898d66/32.png) [@linuxtehran](https://forums.rockylinux.org/u/linuxtehran)\
**Post date:** [June 29, 2026, 12:05pm UTC](https://forums.rockylinux.org/t/missing-auditctl-and-augenrules-tools-in-rocky-linux-10-2-after-installing-the-audit-package/20634/3 "2026-06-29T12:05:07Z")

</div>

Thanks for the info.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex020/uploads/rockylinux/original/1X/91b7219eec10e30013422e4df76c1d898711a5d5.svg) [@system](https://forums.rockylinux.org/u/system)\
**Post date:** [August 28, 2026, 12:05pm UTC](https://forums.rockylinux.org/t/missing-auditctl-and-augenrules-tools-in-rocky-linux-10-2-after-installing-the-audit-package/20634/4 "2026-08-28T12:05:11Z")

</div>

Closed on August 28, 2026, 12:05pm UTC

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.