File: README.md

package info (click to toggle)
rust-laurel 0.7.1-1
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid, trixie
  • size: 1,048 kB
  • sloc: ansic: 3,553; makefile: 65; sh: 50
file content (25 lines) | stat: -rw-r--r-- 739 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
# Debugging Laurel (even in production)

The `run-debug.sh` script in this directory is intended to be run from
the project root dir by a regular user with sudo privileges.

It runs a _laurel_ debug build with a custom configuration. The
configuration is built from a template. If the template contained in
the script is not good enough, place your own template into
`contrib/debug/config.toml.template`.

Audit log data is read from a local socket `/var/run/audispd_events`.
The _auditd_ `af_unix` plugin has to be enabled for this to work. Edit
the configuration file `/etc/audit/plugins.d/af_unix.conf`:

```
active = yes
direction = out
path = builtin_af_unix
type = builtin 
args = 0644 /var/run/audispd_events
format = string
```