Audit Dispatcher Design

[Linda Knippers]

Timothy R. Chavez wrote:
> Will auditd require audisp be running or will the absence of audisp produce a
> default behavior in auditd?

I was wondering about that too.  Is this an optional part of the audit
subsystem or a replacement of the existing implementation?

I was also wondering about the overall design goals, how we'd expect
this to be used and what the performance and error handling
characteristics would be.

-- ljk