From: Dermot Bradley Date: Fri, 29 May 2020 19:55:23 +0100 Updated: Wed, 23 Jul 2025 04:50:16 +0000 correct paths in plugins --- a/audisp/audispd-pconfig.c +++ b/audisp/audispd-pconfig.c @@ -385,7 +385,7 @@ static int direction_parser(struct nv_pair *nv, int line, return 0; } -static const char *BUILTIN_PATH="/sbin/audisp-af_unix"; +static const char *BUILTIN_PATH="/usr/sbin/audisp-af_unix"; static int path_parser(struct nv_pair *nv, int line, plugin_conf_t *config) { --- a/audisp/plugins/remote/au-remote.conf +++ b/audisp/plugins/remote/au-remote.conf @@ -4,7 +4,7 @@ # a remote machine (Central Logger). active = no -path = /sbin/audisp-remote +path = /usr/sbin/audisp-remote type = always #args = format = string --- a/audisp/plugins/syslog/syslog.conf +++ b/audisp/plugins/syslog/syslog.conf @@ -7,7 +7,7 @@ # LOG_AUTHPRIV, LOG_DAEMON, LOG_SYSLOG, and LOG_USER. active = no -path = /sbin/audisp-syslog +path = /usr/sbin/audisp-syslog type = always args = LOG_INFO format = string --- a/init.d/augenrules +++ b/init.d/augenrules @@ -40,7 +40,7 @@ try_load() { if [ $LoadRules -eq 1 ] ; then - /sbin/auditctl -R ${DestinationFile} + /usr/sbin/auditctl -R ${DestinationFile} RETVAL=$? fi }