#!/usr/bin/env bash
set -euo pipefail

if ! command -v auditctl &>/dev/null; then
  echo "auditd: missing"
  exit 1
fi

if systemctl is-active --quiet auditd; then
  echo "auditd: active"
  exit 0
fi

echo "auditd: inactive"
exit 1