Disable ProtectKernelModules by default

Author: stevegrubb

init.d/auditd.service.in

@@ -38,7 +38,8 @@ MemoryDenyWriteExecute=true
 LockPersonality=true
 ## The following control prevents rules on /proc so its off by default
 #ProtectControlGroups=true
-ProtectKernelModules=true
+## The following control prevents rules on /usr/lib/modules/ its off by default
+#ProtectKernelModules=true
 RestrictRealtime=true
 
 [Install]