Re: auditd design decision
Hello,
I view the audit rules in much the same way as IP Tables. I don't
think the
daemon should do the loading. What I was going to do was create an option to
take the commandline options from a file. It would read the file to its end
loading a rule with each newline.
Please include a flush command, using iptables as an example iirc
'iptables -F ALL'
Regards,
Peter