/etc/audisp/plugins.d/af_unix.conf is in auditd 1:2.6.7-2.
This file is owned by root:root, with mode 0o640.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 | # This file controls the configuration of the
# af_unix socket plugin. It simply takes events
# and writes them to a unix domain socket. This
# plugin can take 2 arguments, the path for the
# socket and the socket permissions in octal.
active = no
direction = out
path = builtin_af_unix
type = builtin
args = 0640 /var/run/audispd_events
format = string
|