Re: Architecture of auditd
On Thu, 26 Dec 2013 09:14:19 -0800
William Roberts <bill.c.roberts(a)gmail.com> wrote:
Yes youre missing setting the audit pid so the kernel knows who to
send messages too.
I wrote an auditd from scratch for android, feel free to look at the
code. Its very simple, and
includes the libaudit pieces I needed to re-implement to get a version
that was NOT
GPL'd.
libaudit is LGPL and not GPL. Its legal to link against for any
software with no undue burden the same as glibc is.
-Steve