Edit File: cmdline
/sbin/auditd