remediation for CCE 27243-5, audit log perms

Recommend that this be `chmod 600 /var/log/audit/audit.log` and add a line that takes care of the rest `chmod 400 /var/log/audit/audit.log.*`