//sys/fs/cgroup/cpuacct/system.slice/auditd.service/cgroup.event_control