From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: Re: Architecture of auditd Date: Thu, 2 Jan 2014 09:40:28 -0500 Message-ID: <20140102094028.69115bcc@ivy-bridge> References: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: William Roberts Cc: "linux-audit@redhat.com" List-Id: linux-audit@redhat.com On Thu, 26 Dec 2013 09:14:19 -0800 William Roberts wrote: > Yes youre missing setting the audit pid so the kernel knows who to > send messages too. > > I wrote an auditd from scratch for android, feel free to look at the > code. Its very simple, and > includes the libaudit pieces I needed to re-implement to get a version > that was NOT > GPL'd. libaudit is LGPL and not GPL. Its legal to link against for any software with no undue burden the same as glibc is. -Steve