1 2 3 4
/usr/sbin/post_service auditd if [ $1 -gt 1 ]; then service auditd condrestart ||: fi
/usr/sbin/preun_service auditd if [ $1 -eq 0 ]; then service auditd stop ||: fi