I wrote a short audit policy generating script in python.  This script inspects an auditd-enabled system and then writes a policy to watch certain files and syscalls.  It helps me create a baseline to start with.<br><br>The script is attached......<br>