augenrules: use auditctl from sbindir

This allows running augenrules even if auditctl was not
installed to `/sbin/auditctl` at system-wide fs root.
This may be the case e.g. on non-FHS-compliant systems,
as well as during testing when installing to a temporary prefix.

Author: LordGrimmauld

init.d/augenrules.in

@@ -34,20 +34,21 @@ LoadRules=0
 RETVAL=0
 cmd="$0"
 usage="Usage: $cmd [--check|--load]"
+auditctl_bin=@sbindir@/auditctl
 
 # Delete the interim file on faults
 trap 'rm -f ${TmpRules}; exit 1' HUP INT QUIT PIPE TERM
 
 try_load() {
 	if [ $LoadRules -eq 1 ] ; then
-		/sbin/auditctl -R ${DestinationFile}
+		$auditctl_bin -R ${DestinationFile}
 		RETVAL=$?
 	fi
 }
 
 # Check if audit is in immutable mode - exit if so
 check_immutable () {
-    if [ "$(auditctl -s | awk '$1 == "enabled" { print $2 }')" = "2" ] ; then
+    if [ "$($auditctl_bin -s | awk '$1 == "enabled" { print $2 }')" = "2" ] ; then
 	echo "$cmd: Audit system is in immutable mode - exiting with no changes"
 	exit 0
     fi