T5142: systemd-journald-audit must not show logs from auditd

[sever-sever]

Change Summary

auditd logs must no be displayed for journalctl
mask it

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Code style update (formatting, renaming)
• Refactoring (no functional changes)
• Migration from an old Vyatta component to vyos-1x, please link to related PR inside obsoleted component
• Other (please describe): Mask systemd-journald-audit.socket

Related PR

• T5142: Add audit tool to monitor security-relevant events vyos-1x#1938

Related Task(s)

• https://vyos.dev/T5142
• https://vyos.dev/T4712

Component(s) name

log

Proposed changes

How to test

vyos@r14:~$ show log audit | tail -n 2
type=USER_END msg=audit(1680605966.407:955): pid=4150 uid=1003 auid=1003 ses=1 msg='op=PAM:session_close grantors=pam_limits,pam_permit,pam_mkhomedir,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="vyos" AUID="vyos"
type=CRED_DISP msg=audit(1680605966.407:956): pid=4150 uid=1003 auid=1003 ses=1 msg='op=PAM:setcred grantors=pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="vyos" AUID="vyos"
vyos@r14:~$ 
vyos@r14:~$ 
vyos@r14:~$ sudo journalctl --no-hostname --boot _TRANSPORT=audit --no-pager
-- No entries --
vyos@r14:~$ 
vyos@r14:~$ 

Checklist:

• I have read the CONTRIBUTING document
• I have linked this PR to one or more Phabricator Task(s)
• My commit headlines contain a valid Task id
• My change requires a change to the documentation
• I have updated the documentation accordingly