remediation for CCE 27243-5, audit log perms

What about `chmod 640 /etc/audit/auditd.conf`?