Fix typo on auditd; changed audit rules