diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_rules_session_events_utmp/tests/auditctl_wrong_rule_utmp.fail.sh b/linux_os/guide/system/auditing/auditd_configure_rules/audit_rules_session_events_utmp/tests/auditctl_wrong_rule_utmp.fail.sh
index 0d838534451..5cfbc73890e 100644
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_rules_session_events_utmp/tests/auditctl_wrong_rule_utmp.fail.sh
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_rules_session_events_utmp/tests/auditctl_wrong_rule_utmp.fail.sh
@@ -1,4 +1,4 @@
 #!/bin/bash
 
-echo "-w /run/utmp -p wa -k session" >> /etc/audit/audit.rules
+echo "-w /run/something -p wa -k session" >> /etc/audit/audit.rules
 sed -i "s%^ExecStartPost=.*%ExecStartPost=-/sbin/auditctl%" /usr/lib/systemd/system/auditd.service
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_rules_session_events_utmp/tests/augenrules_wrong_rule_utmp.fail.sh b/linux_os/guide/system/auditing/auditd_configure_rules/audit_rules_session_events_utmp/tests/augenrules_wrong_rule_utmp.fail.sh
index 3dd09e81ae4..ab2ee278d35 100644
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_rules_session_events_utmp/tests/augenrules_wrong_rule_utmp.fail.sh
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_rules_session_events_utmp/tests/augenrules_wrong_rule_utmp.fail.sh
@@ -2,4 +2,4 @@
 
 
 mkdir -p /etc/audit/rules.d
-echo "-w /run/utmp -p wa -k session" >> /etc/audit/rules.d/login.rules
+echo "-w /run/something -p wa -k session" >> /etc/audit/rules.d/login.rules