nixos/auditd: Use new default socket path

The default path of the audisp socket was chanegd in https://github.com/linux-audit/audit-userspace/commit/4ade1466f91dad3c33b2d92596ef8385f3bc5571
2025-09-11 10:05:53 +02:00
parent 1884f0fa52
commit f063f32450
2 changed files with 2 additions and 2 deletions
@@ -229,7 +229,7 @@ in
        path = lib.getExe' pkgs.audit "audisp-af_unix";
        args = [
          "0640"
-          "/var/run/audispd_events"
+          "/run/audit/audispd_events"
          "string"
        ];
        format = "binary";
@@ -40,7 +40,7 @@
      t.assertIn("backlog_limit 512", audit_status)

    with subtest("unix socket plugin activated"):
-      machine.succeed("stat /var/run/audispd_events")
+      machine.succeed("stat /run/audit/audispd_events")

    with subtest("Custom rule produces audit traces"):
      machine.succeed("hello")