> > What it does use for crypto is openssl's libcrypt, > wich is NOT needed when used as a simple (traditional) > rotate system. So Debian can ship audit[d], and if > a user wants it's advanced crypto support, she/he should > install openssl package. > does it dlopen this? in other words, if I have a system without openssl installed will auditd still work? If so, sounds like it can indeed live in main.