auditd design decision

[Peter Martuccelli]

Hello,

> I view the audit rules in much the same way as IP Tables. I don't think the 
> daemon should do the loading. What I was going to do was create an option to 
> take the commandline options from a file. It would read the file to its end 
> loading a rule with each newline.

Please include a flush command, using iptables as an example iirc
'iptables -F ALL' 

Regards,

Peter