This page moved to /forum/support/20160808/what-files-should-be-auditd-turnkey-linux-core/#comment-26319.