## V8.13.096.2025.10.09

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

config/hooks/live/9996_auditd.chroot

@@ -340,16 +340,22 @@ EOF
 
 
 ### Sanity checks: reject empty or malformed rulesets early.
-if ! augenrules --check >/dev/null 2>&1; then
+if ! /sbin/augenrules --check >/dev/null 2>&1; then
 
-  log "ERROR: augenrules --check failed. Please fix /etc/audit/rules.d/*.rules"
+  log "ERROR: /sbin/augenrules --check failed. Please fix /etc/audit/rules.d/*.rules"
   exit 1
 
 fi
 
-### This writes '/etc/audit/audit.rules'.
-log "Compiling /etc/audit/audit.rules (no load)"
-augenrules --no-load
+if /sbin/augenrules --load; then
+
+  log "INFO: /sbin/augenrules --load, successful."
+
+else
+
+  log "ERROR: /sbin/augenrules --load failed."
+
+fi
 
 ### Permissions hardening (augenrules typically sets sane perms; enforce anyway).
 ### 0600 is conservative; 0640 root:root is also acceptable.

config/package-lists/live.list.common.chroot

@@ -94,7 +94,6 @@ man
 man-db
 manpages
 manpages-dev
-mdadm
 mtr
 musl-tools
 nano