Remove the RefuseManualStop=yes option This option is preventing the daemon to be restarted on upgrade. . When using systemctl to stop audit, the audit framework is recording the pid of systemd instead of the one from the user process that actually stopped the process. This is breaking the conformity with some gouvernemental certifications.
