diff --git a/config/hooks/live/9996_auditd.chroot b/config/hooks/live/9996_auditd.chroot index f47c217..6ef837c 100644 --- a/config/hooks/live/9996_auditd.chroot +++ b/config/hooks/live/9996_auditd.chroot @@ -340,16 +340,22 @@ EOF ### Sanity checks: reject empty or malformed rulesets early. -if ! augenrules --check >/dev/null 2>&1; then +if ! /sbin/augenrules --check >/dev/null 2>&1; then - log "ERROR: augenrules --check failed. Please fix /etc/audit/rules.d/*.rules" + log "ERROR: /sbin/augenrules --check failed. Please fix /etc/audit/rules.d/*.rules" exit 1 fi -### This writes '/etc/audit/audit.rules'. -log "Compiling /etc/audit/audit.rules (no load)" -augenrules --no-load +if /sbin/augenrules --load; then + + log "INFO: /sbin/augenrules --load, successful." + +else + + log "ERROR: /sbin/augenrules --load failed." + +fi ### Permissions hardening (augenrules typically sets sane perms; enforce anyway). ### 0600 is conservative; 0640 root:root is also acceptable. diff --git a/config/package-lists/live.list.common.chroot b/config/package-lists/live.list.common.chroot index 51ea5ce..3a25d77 100644 --- a/config/package-lists/live.list.common.chroot +++ b/config/package-lists/live.list.common.chroot @@ -94,7 +94,6 @@ man man-db manpages manpages-dev -mdadm mtr musl-tools nano