diff -Nru audit-2.8.4.orig/init.d/auditd.state audit-2.8.4/init.d/auditd.state
--- audit-2.8.4.orig/init.d/auditd.state	2018-05-21 19:38:08.000000000 +0200
+++ audit-2.8.4/init.d/auditd.state	2019-01-05 08:46:05.999451866 +0100
@@ -7,7 +7,7 @@
 
 PATH=/sbin:/bin:/usr/bin:/usr/sbin
 prog="auditd"
-state_file="/var/run/auditd.state"
+state_file="/run/auditd.state"
 . /etc/init.d/functions
 
 printf "Getting auditd internal state: "
diff -Nru audit-2.8.4.orig/src/auditd.c audit-2.8.4/src/auditd.c
--- audit-2.8.4.orig/src/auditd.c	2018-05-21 19:38:08.000000000 +0200
+++ audit-2.8.4/src/auditd.c	2019-01-05 08:44:18.153983329 +0100
@@ -66,8 +66,8 @@
 /* Local data */
 static int fd = -1, pipefds[2] = {-1, -1};
 static struct daemon_conf config;
-static const char *pidfile = "/var/run/auditd.pid";
-static const char *state_file = "/var/run/auditd.state";
+static const char *pidfile = "/run/auditd.pid";
+static const char *state_file = "/run/auditd.state";
 static int init_pipe[2];
 static int do_fork = 1, opt_aggregate_only = 0, config_dir_set = 0;
 static struct auditd_event *cur_event = NULL, *reconfig_ev = NULL;