Architecture of auditd

[Steve Grubb]

On Thu, 26 Dec 2013 09:14:19 -0800
William Roberts <bill.c.roberts at gmail.com> wrote:

> Yes youre missing setting the audit pid so the kernel knows who to
> send messages too.
> 
> I wrote an auditd from scratch for android, feel free to look at the
> code. Its very simple, and
> includes the libaudit pieces I needed to re-implement to get a version
> that was NOT
> GPL'd.

libaudit is LGPL and not GPL. Its legal to link against for any
software with no undue burden the same as glibc is.

-Steve