currently: path = /sbin/audisp-remote should be: path = /usr/sbin/audisp-remote from logs: audispd[384]: Unable to stat /sbin/audisp-remote (No such file or directory) audispd[384]: Skipping au-remote.conf plugin due to errors Reproducible: Always
version?
currently sys-process/audit-2.4.3, but it's been like that for quite a few releases.
Same here, I'm using sys-process/audit-2.4.3-r1 Looks like audisp-remote file moved from /sbin/ to /usr/sbin/ but path in config file not changed. Ebuild snip: 156 [ -f "${D}"/sbin/audisp-remote ] && \ 157 dodir /usr/sbin && \ 158 mv "${D}"/{sbin,usr/sbin}/audisp-remote || die
This bug still exists in audit-2.6.4 After changing the path, no more issues. Seems like a Gentoo specific configuration that should be added.
Bumped into this one, too