# This file controls the configuration of the # af_unix socket plugin. It simply takes events # and writes them to a unix domain socket. This # plugin can take 2 arguments, the path for the # socket and the socket permissions in octal. active = no direction = out path = /usr/bin/audisp-af_unix type = always args = 0640 /run/audispd_events string format = binary