Arch Linux

gundamfj

Member

Registered: 2012-01-02

Posts: 21

Where is the auditd configuration file?

Acorrding to a documentation here, there is a file called /etc/sysconfig/auditd. It's the configuration file of auditd. But :

jack ~ $ locate audit | grep etc
/etc/audit
/etc/libaudit.conf
/etc/audit/audit.rules
/etc/audit/auditd.conf

not such file obviously.

Last edited by gundamfj (2013-06-09 11:28:32)

msthev

Member

Registered: 2012-04-05

Posts: 177

Re: Where is the auditd configuration file?

And why do you think some random SUSE tutorial is more right than the package's documentation?
Have a look, it's really short:

$ man auditd

By the way, this is a great example why Arch forums are so strict about providing support only for Arch: either this SUSE config file is in custom location (moved there by SUSE developers), or this tutorial is outdated.

Edit:
It seems /etc/sysconfig/auditd is not auditd's configuration file, but its service's config. This is done through systemd now.

Last edited by msthev (2013-06-09 11:46:38)

karol

Archivist

Registered: 2009-05-06

Posts: 25,440

Re: Where is the auditd configuration file?

Maybe it has been moved to systemd service: /usr/lib/systemd/system/auditd.service ?