Bug 557304

Summary:	sys-process/audit - config file /etc/audisp/plugins.d/au-remote.conf uses wrong path
Product:	Gentoo Linux	Reporter:	Reuben Martin <reuben.m>
Component:	Current packages	Assignee:	SE Linux Bugs <selinux>
Status:	UNCONFIRMED ---
Severity:	normal	CC:	aklhfex, andre, robbat2
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Reuben Martin 2015-08-11 16:03:01 UTC

currently:
path = /sbin/audisp-remote

should be:
path = /usr/sbin/audisp-remote

from logs:
audispd[384]: Unable to stat /sbin/audisp-remote (No such file or directory)
audispd[384]: Skipping au-remote.conf plugin due to errors



Reproducible: Always

Comment 1 Alex Xu (Hello71) 2015-08-17 14:32:28 UTC

version?

Comment 2 Reuben Martin 2015-08-18 16:48:37 UTC

currently sys-process/audit-2.4.3, but it's been like that for quite a few releases.

Comment 3 Drunkard Zhang 2016-05-25 06:11:49 UTC

Same here, I'm using sys-process/audit-2.4.3-r1

Looks like audisp-remote file moved from /sbin/ to /usr/sbin/ but path in config file not changed.

Ebuild snip:

156		[ -f "${D}"/sbin/audisp-remote ] && \
157		dodir /usr/sbin && \
158		mv "${D}"/{sbin,usr/sbin}/audisp-remote || die

Comment 4 regdude 2017-08-03 18:33:53 UTC

This bug still exists in audit-2.6.4

After changing the path, no more issues.
Seems like a Gentoo specific configuration that should be added.

Comment 5 André Terpstra 2020-08-26 06:45:07 UTC

Bumped into this one, too