diff --git a/shared/templates/create_audit_rules_login_events.py b/shared/templates/create_audit_rules_login_events.py
index 111a27a1306..3dc1f5cb0da 100644
--- a/shared/templates/create_audit_rules_login_events.py
+++ b/shared/templates/create_audit_rules_login_events.py
@@ -14,7 +14,7 @@
 class AuditRulesLoginEventsGenerator(FilesGenerator):
     def generate(self, target, args):
         path = args[0]
-        name = re.sub('[-\./]', '_', os.path.basename(path))
+        name = re.sub('[-\./]', '_', os.path.basename(os.path.normpath(path)))
         if target == "oval":
             self.file_from_template(
                 "./template_OVAL_audit_rules_login_events",
diff --git a/shared/templates/csv/audit_rules_login_events.csv b/shared/templates/csv/audit_rules_login_events.csv
index cdec8d6b8ea..5c9793afbee 100644
--- a/shared/templates/csv/audit_rules_login_events.csv
+++ b/shared/templates/csv/audit_rules_login_events.csv
@@ -1,3 +1,3 @@
-/var/run/faillock
+/var/run/faillock/
 /var/log/lastlog
 /var/log/tallylog