diff --git a/audit.rules b/audit.rules
index 41b7e22..d0446c3 100644
--- a/audit.rules
+++ b/audit.rules
@@ -387,8 +387,11 @@
 -w /usr/bin/lzip -p x -k Data_Compressed
 -w /usr/local/bin/lzip -p x -k Data_Compressed
 
--w /usr/bin/lz4 -p x -k Data_Compressed
--w /usr/local/bin/lz4 -p x -k Data_Compressed
+-a always,exit -F arch=b32 -F path=/usr/bin/lz4 -F perm=x -F key=Data_Compressed
+-a always,exit -F arch=b64 -F path=/usr/bin/lz4 -F perm=x -F key=Data_Compressed
+
+-a always,exit -F arch=b32 -F path=/usr/local/bin/lz4 -F perm=x -F key=Data_Compressed
+-a always,exit -F arch=b64 -F path=/usr/local/bin/lz4 -F perm=x -F key=Data_Compressed
 
 -w /usr/bin/lzop -p x -k Data_Compressed
 -w /usr/local/bin/lzop -p x -k Data_Compressed