Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.
How can I enable audit on access to specific files in Suse Linux Enterprise 9?
Maybe you should take a look at SUSE's official doc
Another useful source of info is auditd's man page which says that all the specific file configurations are in /etc/audit/audit.rules
rpm -ql <audit's package name>
Required, but never shown