Content of RPM audit-2.7.8-1.fc27.x86_64.rpm :
/etc/audisp
/etc/audisp/audispd.conf
/etc/audisp/plugins.d
/etc/audisp/plugins.d/af_unix.conf
/etc/audisp/plugins.d/syslog.conf
/etc/audit
/etc/audit/audit-stop.rules
/etc/audit/audit.rules
/etc/audit/auditd.conf
/etc/audit/rules.d
/etc/audit/rules.d/audit.rules
/sbin/audispd
/sbin/auditctl
/sbin/auditd
/sbin/augenrules
/sbin/aureport
/sbin/ausearch
/sbin/autrace
/usr/bin/aulast
/usr/bin/aulastlog
/usr/bin/ausyscall
/usr/bin/auvirt
/usr/lib/.build-id
/usr/lib/.build-id/01
/usr/lib/.build-id/01/ee889f707b85212ee22d31912ee8739bf33d2b
/usr/lib/.build-id/02
/usr/lib/.build-id/02/333720bd036ca6884779e05b0e267a66f2e781
/usr/lib/.build-id/39
/usr/lib/.build-id/39/0e21bff1d92f6a2f52930b37756c647b6b6444
/usr/lib/.build-id/53
/usr/lib/.build-id/53/7b7eadb48117d6b0590c41a6676800c757dc38
/usr/lib/.build-id/76
/usr/lib/.build-id/76/fd65d483f67b0fa7852ca857e86ecb6f2e6edc
/usr/lib/.build-id/9b
/usr/lib/.build-id/9b/8d2e1582cad85db4331ecc6e78b7b6bc6749fe
/usr/lib/.build-id/b5
/usr/lib/.build-id/b5/b8fb79ec687060e8f1aba1f5df4e74f27f65e9
/usr/lib/.build-id/b5/cb0e83187c4486017b0110826f751799d33821
/usr/lib/.build-id/d5
/usr/lib/.build-id/d5/4f461a030509440ef420344054aec626f153ad
/usr/lib/.build-id/e5
/usr/lib/.build-id/e5/973ed35fc3a83ed04313d3f31d05031915d80d
/usr/lib/systemd/system/auditd.service
/usr/libexec/initscripts/legacy-actions/auditd
/usr/libexec/initscripts/legacy-actions/auditd/condrestart
/usr/libexec/initscripts/legacy-actions/auditd/restart
/usr/libexec/initscripts/legacy-actions/auditd/resume
/usr/libexec/initscripts/legacy-actions/auditd/rotate
/usr/libexec/initscripts/legacy-actions/auditd/stop
/usr/share/doc/audit
/usr/share/doc/audit/ChangeLog
/usr/share/doc/audit/README
/usr/share/doc/audit/auditd.cron
/usr/share/doc/audit/rules
/usr/share/doc/audit/rules/10-base-config.rules
/usr/share/doc/audit/rules/10-no-audit.rules
/usr/share/doc/audit/rules/11-loginuid.rules
/usr/share/doc/audit/rules/12-cont-fail.rules
/usr/share/doc/audit/rules/12-ignore-error.rules
/usr/share/doc/audit/rules/20-dont-audit.rules
/usr/share/doc/audit/rules/21-no32bit.rules
/usr/share/doc/audit/rules/22-ignore-chrony.rules
/usr/share/doc/audit/rules/30-nispom.rules
/usr/share/doc/audit/rules/30-pci-dss-v31.rules
/usr/share/doc/audit/rules/30-stig.rules
/usr/share/doc/audit/rules/31-privileged.rules
/usr/share/doc/audit/rules/32-power-abuse.rules
/usr/share/doc/audit/rules/40-local.rules
/usr/share/doc/audit/rules/41-containers.rules
/usr/share/doc/audit/rules/42-injection.rules
/usr/share/doc/audit/rules/43-module-load.rules
/usr/share/doc/audit/rules/70-einval.rules
/usr/share/doc/audit/rules/71-networking.rules
/usr/share/doc/audit/rules/99-finalize.rules
/usr/share/doc/audit/rules/README-rules
/usr/share/licenses/audit
/usr/share/licenses/audit/COPYING
/usr/share/man/man5/audispd.conf.5.gz
/usr/share/man/man5/auditd.conf.5.gz
/usr/share/man/man5/ausearch-expression.5.gz
/usr/share/man/man7/audit.rules.7.gz
/usr/share/man/man8/audispd.8.gz
/usr/share/man/man8/auditctl.8.gz
/usr/share/man/man8/auditd.8.gz
/usr/share/man/man8/augenrules.8.gz
/usr/share/man/man8/aulast.8.gz
/usr/share/man/man8/aulastlog.8.gz
/usr/share/man/man8/aureport.8.gz
/usr/share/man/man8/ausearch.8.gz
/usr/share/man/man8/ausyscall.8.gz
/usr/share/man/man8/autrace.8.gz
/usr/share/man/man8/auvirt.8.gz
/var/log/audit
4918221