diff --git a/files/etc/audit/rules.d/docker.rules b/files/etc/audit/rules.d/docker.rules
index d7dfab0..543d250 100644
--- a/files/etc/audit/rules.d/docker.rules
+++ b/files/etc/audit/rules.d/docker.rules
@@ -10,3 +10,5 @@
 -w /etc/docker/daemon.json -k docker
 -w /usr/bin/docker-containerd -k docker
 -w /usr/bin/docker-runc -k docker
+-w /usr/bin/containerd -k docker
+-w /usr/bin/dockerd -k docker
\ No newline at end of file