diff --git a/README.md b/README.md index 930369b7..51c4717f 100644 --- a/README.md +++ b/README.md @@ -170,9 +170,9 @@ The following subsections discuss audito-maldito's configuration. audito-maldito reads input data from named pipes (FIFOs). It expects these data sources to be specified using the following arguments: -- `-auditd-log-file-path` - The file path to a named pipe that produces +- `-auditd-pipe-path` - The file path to a named pipe that produces Linux auditd events (i.e., events from "/var/log/audit/audit.log") -- `-sshd-log-file-path` - The file path to a named pipe that produces +- `-sshd-pipe-path` - The file path to a named pipe that produces OpenSSH sshd logs #### Required files diff --git a/cmd/namedpipe.go b/cmd/namedpipe.go index b72b152c..ba76b916 100644 --- a/cmd/namedpipe.go +++ b/cmd/namedpipe.go @@ -62,14 +62,14 @@ func RunNamedPipe(ctx context.Context, osArgs []string, h *health.Health, optLog "Path to the app events output") flagSet.StringVar( &sshdLogFilePath, - "sshd-log-file-path", + "sshd-pipe-path", "/app-audit/sshd-pipe", - "Path to the sshd log file") + "Path to the sshd log named pipe file") flagSet.StringVar( &auditdLogFilePath, - "auditd-log-file-path", + "auditd-pipe-path", "/app-audit/audit-pipe", - "Path to the audit log file") + "Path to the audit log named pipe file") flagSet.Usage = func() { os.Stderr.WriteString(usage)