557304 – sys-process/audit - config file /etc/audisp/plugins.d/au-remote.conf uses wrong path

Bug 557304 - sys-process/audit - config file /etc/audisp/plugins.d/au-remote.conf uses wrong path

Summary: sys-process/audit - config file /etc/audisp/plugins.d/au-remote.conf uses wro...

Status:	UNCONFIRMED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Current packages (show other bugs)
Hardware:	All Linux

Importance:	Normal normal with 3 votes (vote)
Assignee:	SE Linux Bugs

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2015-08-11 16:03 UTC by Reuben Martin
Modified:	2020-08-26 06:45 UTC (History)
CC List:	3 users (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Reuben Martin 2015-08-11 16:03:01 UTC

currently:
path = /sbin/audisp-remote

should be:
path = /usr/sbin/audisp-remote

from logs:
audispd[384]: Unable to stat /sbin/audisp-remote (No such file or directory)
audispd[384]: Skipping au-remote.conf plugin due to errors



Reproducible: Always

Comment 1 Alex Xu (Hello71) 2015-08-17 14:32:28 UTC

version?

Comment 2 Reuben Martin 2015-08-18 16:48:37 UTC

currently sys-process/audit-2.4.3, but it's been like that for quite a few releases.

Comment 3 Drunkard Zhang 2016-05-25 06:11:49 UTC

Same here, I'm using sys-process/audit-2.4.3-r1

Looks like audisp-remote file moved from /sbin/ to /usr/sbin/ but path in config file not changed.

Ebuild snip:

156		[ -f "${D}"/sbin/audisp-remote ] && \
157		dodir /usr/sbin && \
158		mv "${D}"/{sbin,usr/sbin}/audisp-remote || die

Comment 4 regdude 2017-08-03 18:33:53 UTC

This bug still exists in audit-2.6.4

After changing the path, no more issues.
Seems like a Gentoo specific configuration that should be added.

Comment 5 André Terpstra 2020-08-26 06:45:07 UTC

Bumped into this one, too