Debian 13 (Trixie) native package

auditd

User space tools for security auditing

Packages / Debian 13 (Trixie) / admin / auditd

[Source: audit]

Package: auditd (1:4.0.2-2+b2)

Maintainers:

Laurent Bigonville

External Resources:

Homepage: [people.redhat.com]

Similar packages:

[audispd-plugins]
Plugins for the audit event dispatcher
[golang-redhat-audit-dev]
Go client bindings for the libaudit library
[libaudit1]
Dynamic library for security auditing
[libaudit-common]
Dynamic library for security auditing - common files
[libaudit-dev]
Header files and static library for security auditing
[libauparse0t64]
Dynamic library for parsing security auditing
[libauparse-dev]
Header files and static library for the libauparse0t64 library
[python3-audit]
Python3 bindings for security auditing

User space tools for security auditing

Other Packages Related to auditd:

dep: [libaudit1] (= 1:4.0.2-2+b2)
Dynamic library for security auditing
dep: [libauparse0t64] (= 1:4.0.2-2+b2)
Dynamic library for parsing security auditing
dep: [mawk]
Pattern scanning and text processing language
dep: [gawk]
GNU awk, a pattern scanning and processing language
dep: [libc6] (>= 2.38)
GNU C Library: Shared libraries
dep: [libcap-ng0] (>= 0.7.9)
alternate POSIX capabilities library
dep: [libgssapi-krb5-2] (>= 1.17)
MIT Kerberos runtime libraries - krb5 GSS-API Mechanism
dep: [libkrb5-3] (>= 1.6.dfsg.2)
MIT Kerberos runtime libraries
dep: [libwrap0] (>= 7.6-4~)
Wietse Venema's TCP wrappers library

sug: [audispd-plugins]
Plugins for the audit event dispatcher

Download auditd

Architecture	Package Size	Installed Size	Files
amd64	212 KiB	748 KiB	[list of files]
arm64	202 KiB	1.1 MiB	[list of files]

Rutas de archivos del paquete (82)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

/etc/audit/audisp-filter.conf
/etc/audit/auditd.conf
/etc/audit/audit-stop.rules
/etc/audit/plugins.d/af_unix.conf
/etc/audit/plugins.d/filter.conf
/etc/audit/plugins.d/syslog.conf
/etc/audit/rules.d/audit.rules
/etc/default/auditd
/etc/init.d/auditd
/usr/bin/aulast
/usr/bin/aulastlog
/usr/bin/ausyscall
/usr/lib/systemd/system/auditd.service
/usr/lib/systemd/system/audit-rules.service
/usr/sbin/audisp-af_unix
/usr/sbin/audisp-filter
/usr/sbin/audisp-syslog
/usr/sbin/auditctl
/usr/sbin/auditd
/usr/sbin/augenrules
/usr/sbin/aureport
/usr/sbin/ausearch
/usr/share/doc/auditd/changelog.Debian.amd64.gz
/usr/share/doc/auditd/changelog.Debian.arm64.gz
/usr/share/doc/auditd/changelog.Debian.gz
/usr/share/doc/auditd/changelog.gz
/usr/share/doc/auditd/copyright
/usr/share/doc/auditd/examples/auditd.cron
/usr/share/doc/auditd/examples/audit-rules/10-base-config.rules
/usr/share/doc/auditd/examples/audit-rules/10-no-audit.rules
/usr/share/doc/auditd/examples/audit-rules/11-loginuid.rules
/usr/share/doc/auditd/examples/audit-rules/12-cont-fail.rules
/usr/share/doc/auditd/examples/audit-rules/12-ignore-error.rules
/usr/share/doc/auditd/examples/audit-rules/20-dont-audit.rules
/usr/share/doc/auditd/examples/audit-rules/21-no32bit.rules
/usr/share/doc/auditd/examples/audit-rules/22-ignore-chrony.rules
/usr/share/doc/auditd/examples/audit-rules/23-ignore-filesystems.rules
/usr/share/doc/auditd/examples/audit-rules/30-ospp-v42-1-create-failed.rules
/usr/share/doc/auditd/examples/audit-rules/30-ospp-v42-1-create-success.rules
/usr/share/doc/auditd/examples/audit-rules/30-ospp-v42-2-modify-failed.rules
/usr/share/doc/auditd/examples/audit-rules/30-ospp-v42-2-modify-success.rules
/usr/share/doc/auditd/examples/audit-rules/30-ospp-v42-3-access-failed.rules
/usr/share/doc/auditd/examples/audit-rules/30-ospp-v42-3-access-success.rules
/usr/share/doc/auditd/examples/audit-rules/30-ospp-v42-4-delete-failed.rules
/usr/share/doc/auditd/examples/audit-rules/30-ospp-v42-4-delete-success.rules
/usr/share/doc/auditd/examples/audit-rules/30-ospp-v42-5-perm-change-failed.rules
/usr/share/doc/auditd/examples/audit-rules/30-ospp-v42-5-perm-change-success.rules
/usr/share/doc/auditd/examples/audit-rules/30-ospp-v42-6-owner-change-failed.rules
/usr/share/doc/auditd/examples/audit-rules/30-ospp-v42-6-owner-change-success.rules
/usr/share/doc/auditd/examples/audit-rules/30-ospp-v42.rules
/usr/share/doc/auditd/examples/audit-rules/30-pci-dss-v31.rules
/usr/share/doc/auditd/examples/audit-rules/30-stig.rules
/usr/share/doc/auditd/examples/audit-rules/31-privileged.rules
/usr/share/doc/auditd/examples/audit-rules/32-power-abuse.rules
/usr/share/doc/auditd/examples/audit-rules/40-local.rules
/usr/share/doc/auditd/examples/audit-rules/41-containers.rules
/usr/share/doc/auditd/examples/audit-rules/42-injection.rules
/usr/share/doc/auditd/examples/audit-rules/43-module-load.rules
/usr/share/doc/auditd/examples/audit-rules/44-installers.rules
/usr/share/doc/auditd/examples/audit-rules/70-einval.rules
/usr/share/doc/auditd/examples/audit-rules/71-networking.rules
/usr/share/doc/auditd/examples/audit-rules/99-finalize.rules
/usr/share/doc/auditd/examples/audit-rules/README-rules
/usr/share/doc/auditd/NEWS.Debian.gz
/usr/share/doc/auditd/README.Debian
/usr/share/doc/auditd/README.md.gz
/usr/share/lintian/overrides/auditd
/usr/share/man/man5/auditd.conf.5.gz
/usr/share/man/man5/auditd-plugins.5.gz
/usr/share/man/man5/ausearch-expression.5.gz
/usr/share/man/man7/audit.rules.7.gz
/usr/share/man/man8/audisp-af_unix.8.gz
/usr/share/man/man8/audisp-filter.8.gz
/usr/share/man/man8/audisp-syslog.8.gz
/usr/share/man/man8/auditctl.8.gz
/usr/share/man/man8/auditd.8.gz
/usr/share/man/man8/augenrules.8.gz
/usr/share/man/man8/aulast.8.gz
/usr/share/man/man8/aulastlog.8.gz
/usr/share/man/man8/aureport.8.gz
/usr/share/man/man8/ausearch.8.gz
/usr/share/man/man8/ausyscall.8.gz

Field source: Debian 13 (Trixie) main amd64 revision trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

Usar este paquete

OpenFactory puede arrancar este sistema operativo en una máquina virtual del navegador, o iniciar una construcción que incluye el nombre nativo del paquete de este registro.

Probar Debian 13 (Trixie) en el navegador Construir una imagen que incluye auditd

Versiones, suites y repositorios

Cada fila es metadato del índice de paquetes para una versión, arquitectura, suite y repositorio. Nombres, URL y tamaños vienen de la fuente; un enlace es un punto de descarga que puede cambiar, no una redistribución de OpenFactory.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
1:4.0.2-2+b2	trixie / main	amd64	Debian 13 · main · amd64	212 KiB	748 KiB	pool/main/a/audit/auditd_4.0.2-2+b2_amd64.deb
1:4.0.2-2+b2	trixie / main	arm64	Debian 13 · main · arm64	202 KiB	1.1 MiB	pool/main/a/audit/auditd_4.0.2-2+b2_arm64.deb

Field source: Debian 13 (Trixie) main amd64 revision trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

Sumas de comprobación y fechas de observación

For an APT source, signature verification authenticates the repository metadata chain and the Packages index containing this source-reported artifact digest. It does not certify package safety.

1:4.0.2-2+b2 / amd64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: cc21921dca59894879ba9fef423b2f5ad978b755d3bdd9d8512e8f6672d9a439

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s  %s\n' 'cc21921dca59894879ba9fef423b2f5ad978b755d3bdd9d8512e8f6672d9a439' 'auditd_4.0.2-2+b2_amd64.deb' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Debian 13 (Trixie) main amd64 revision trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

1:4.0.2-2+b2 / arm64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: efff38b2f8ac78611b0330176bfc13e277885ef88e2fe2b45f5f1767c40670e8

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s  %s\n' 'efff38b2f8ac78611b0330176bfc13e277885ef88e2fe2b45f5f1767c40670e8' 'auditd_4.0.2-2+b2_arm64.deb' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Debian 13 (Trixie) main arm64 revision trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908

Completitud del registro

The completeness score measures metadata coverage, not software quality, security, compatibility, or suitability.

Summary and description: 25/25
Artifact path and source digest: 25/25
Dependency metadata: 15/15
Package-file index: 15/15
Homepage: 5/5
License text: 0/5
Source package or maintainer: 10/10

Recorded total: 95/100

Field source: Debian 13 (Trixie) main amd64 revision trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3, Debian 13 (Trixie) main arm64 revision trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908. The cross-OS mapping is catalog-derived from the source-reported homepage; it does not establish authorship or publisher identity

Fuentes y procedencia

Field-source links above resolve here. Each source entry names the metadata publisher, trust tier, exact snapshot revision, signature result, and observation time; catalog-derived mappings are labeled separately.

Debian 13 (Trixie) main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified, revision trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/trixie/InRelease
Signed-object SHA-256
98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Signed Release → package-index hash linkage
Path: main/binary-amd64/Packages.xz
Expected SHA-256: 3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Observed SHA-256: 3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Result: match verified
Debian 13 (Trixie) main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified, revision trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/trixie/InRelease
Signed-object SHA-256
98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Signed Release → package-index hash linkage
Path: main/binary-arm64/Packages.xz
Expected SHA-256: 753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Observed SHA-256: 753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Result: match verified