/var/log/audit/audit.log {
        notifempty
	daily
        rotate 7
        missingok
        compress
    prerotate
	if test -n "`ps acx|grep auditd`"; then
	  service audit stop
	  touch /tmp/audit.stopped
	fi
    postrotate
	if [ -f /tmp/audit.stopped ]; then
	  service audit start
	  rm -f /tmp/audit.stopped
	fi
    endscript
}
