A bug was found that is causing audisp-plugins to get malformed events. Auditd will now correct directory permissions for logging on startup. There is also now audit-stop.rules that can be enabled in auditd.service to cleanup when auditd is stopped.

This update to the audit system adds a new enriched data format. This will help in reporting when multiple system's audit logs are aggregated on a central server.