RFE: add support action "exec" for max_log_file_action similar space_left_action action "exec"

[GYShit]

Add support action "exec" for max_log_file_action similar space_left_action action "exec". Then There will be more powerful extended processing capabilities

Currently max_log_file_action in auditd.conf has valid values below:
“ignore ", " syslog ", " suspend ", " rotate " and "keep_logs.

Comparing space_left_action and admin_space_left_action, there is no custom action “exec”

[stevegrubb]

The only issue with this is that auditd would have to close the logging descriptor and suspend logging. That means whatever gets executed will need to send SIGUSR2 to it's ppid to restart logging.