Acorrding to a documentation here, there is a file called /etc/sysconfig/auditd. It's the configuration file of auditd. But :
jack ~ $ locate audit | grep etc /etc/audit /etc/libaudit.conf /etc/audit/audit.rules /etc/audit/auditd.conf
not such file obviously.
Last edited by gundamfj (2013-06-09 11:28:32)
And why do you think some random SUSE tutorial is more right than the package's documentation?
Have a look, it's really short:
$ man auditd
By the way, this is a great example why Arch forums are so strict about providing support only for Arch: either this SUSE config file is in custom location (moved there by SUSE developers), or this tutorial is outdated.
It seems /etc/sysconfig/auditd is not auditd's configuration file, but its service's config. This is done through systemd now.
Last edited by msthev (2013-06-09 11:46:38)
Maybe it has been moved to systemd service: /usr/lib/systemd/system/auditd.service ?