Rationalize default configuration file paths and update documentation

2026-05-14 20:14:11 -05:00
parent 46b7356a3b
commit a84941d681
8 changed files with 80 additions and 17 deletions
--- a/README.md
+++ b/README.md
@@ -137,7 +137,7 @@ For subprocess orchestration guidance, see [`docs/subprocess-operations.md`](doc

 Precedence:
 1. defaults
-2. config file (`--config`, `AUDITA_CONFIG`, or `/etc/audita/config.yml` when present)
+2. config file (`--config`, `AUDITA_CONFIG`, or default search paths when present: `/usr/local/etc/audita/config.yml`, then `/etc/audita/config.yml`)
 3. environment (`AUDITA_*`)
 4. CLI flags