--audit_allow_fim_events enable the fim with audi...
# general
v
--audit_allow_fim_events enable the fim with auditd and not inotify, right?