Re: Audit Dispatcher Design
Timothy R. Chavez wrote:
Will auditd require audisp be running or will the absence of audisp
produce a
default behavior in auditd?
I was wondering about that too. Is this an optional part of the audit
subsystem or a replacement of the existing implementation?
I was also wondering about the overall design goals, how we'd expect
this to be used and what the performance and error handling
characteristics would be.
-- ljk