From 64044fdfa5cb0ea3493544b3a24bd11bf6ebde54 Mon Sep 17 00:00:00 2001
From: Fiona Klute <fiona.klute@gmx.de>
Date: Wed, 8 Oct 2025 12:15:28 +0200
Subject: [PATCH] package/audit/S02auditd: fix path for default rules

/etc/audit/audit.rules is the path used by augenrules,
/etc/audit/rules.d/ should be used for snippets to be combined into
that file using augenrules.

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit baa05d88cfc9862e60b3f9284e8ff7eeeab54458)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
---
 package/audit/S02auditd | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package/audit/S02auditd b/package/audit/S02auditd
index 97c43bc66f..a660ca921a 100644
--- a/package/audit/S02auditd
+++ b/package/audit/S02auditd
@@ -28,7 +28,7 @@ start(){
 	status=$?
 	if [ "${status}" -eq 0 ]; then
 		# Load the default rules
-		test -f /etc/audit/rules.d/audit.rules && /usr/sbin/auditctl -R /etc/audit/rules.d/audit.rules >/dev/null
+		test -f /etc/audit/audit.rules && /usr/sbin/auditctl -R /etc/audit/audit.rules >/dev/null
 		echo "OK"
 	else
 		echo "FAIL"