  Plugin framework   Its time to start the ball rolling with the
new development. First up is the  plugin architecture. Let me
explain a proposal and then we can discuss it.  To make the
audit system more useful, we need to be able to pass events to
other software for realtime analysis and responding. We also
need to be able  pass protection profiles which mean the audit
system cannot be complicated to  explain its operation. We also
cannot allow plugins to the audit system to  corrupt or crash
the audit daemon.  The way that this will be accomplished is to
add another configuration  parameter dispatcher. This will take
the full path to a program that  dispatches audit events. The
audit daemon will fork on startup and open a   The dispatcher
will read from stdin to get audit events. The audit daemon will
use nonblocking writes to the pipe so that it can move on to
process the  event itself. (We could make it configurable as to
whether to use blocking or  nonblocking writes.) If the
dispatcher parameter is e