Here's a debdiff which backports the upstream patches that disable the auditd network listener and splits up the auditd package into auditd-common, auditd, and auditd-light. I've tested the resulting packages and everything looks good except for these dpkg warnings when doing a dist-upgrade to the new auditd package:
...
Preparing to replace auditd 1.7.18-1ubuntu1 (using .../auditd_1.7.18-1ubuntu2_amd64.deb) ...
Unpacking replacement auditd ...
dpkg: warning: unable to delete old directory '/etc/audit': Directory not empty
dpkg: warning: unable to delete old directory '/etc/audisp/plugins.d': Directory not empty
dpkg: warning: unable to delete old directory '/etc/audisp': Directory not empty
dpkg: warning: unable to delete old directory '/var/log/audit': Directory not empty
...
Those directories were moved from the auditd package to the auditd-common package. This is the first time that I've done a package split, so I'm not sure how serious those warnings are or how to fix them.
Here's a debdiff which backports the upstream patches that disable the auditd network listener and splits up the auditd package into auditd-common, auditd, and auditd-light. I've tested the resulting packages and everything looks good except for these dpkg warnings when doing a dist-upgrade to the new auditd package:
... 1.7.18- 1ubuntu2_ amd64.deb) ... plugins. d': Directory not empty
Preparing to replace auditd 1.7.18-1ubuntu1 (using .../auditd_
Unpacking replacement auditd ...
dpkg: warning: unable to delete old directory '/etc/audit': Directory not empty
dpkg: warning: unable to delete old directory '/etc/audisp/
dpkg: warning: unable to delete old directory '/etc/audisp': Directory not empty
dpkg: warning: unable to delete old directory '/var/log/audit': Directory not empty
...
Those directories were moved from the auditd package to the auditd-common package. This is the first time that I've done a package split, so I'm not sure how serious those warnings are or how to fix them.