Things that need to be done:
===========================
2.8.2
* Look into TLS support
* Support multiple time streams when searching
* Add rule verify to detect mismatch between in-kernel and on-disk rules
* In audispd, look into non-blocking handling of write to plugins

2.9
* Look at pulling audispd into auditd
* Container support
* Performance improvements for auparse (Memory management)
* Add ability to filter events in auditd
* Fix audit.pc.in to use Requires.private
* If auparse input is a pipe timeout events by wall clock
* Change ausearch to output name="" unless its a real null. (mount) ausearch-report.c, 523. FIXME

3.0
* Basic HIDS based on reactive audit component
* Consolidate linked lists and other functions
* Consolidate parsing code between libaudit and auditd-conf.c
* Fix SIGHUP for auditd network settings
* Add gzip format for logs

3.0.1
* Add keywords for time: month-ago
* Look at adding the direction read/write to file report (threat modelling)
* Fix aureport accounting for avc in permissive mode
* Fix aureport-scan to properly decide if CONFIG_CHANGE is add or del, need to optionally look for op and use remove/add to decide
