To use an Audit daemon's audit record logging service, you need the log (l) permission to the Audit daemon.