Hi,
I've just released a new version of the audit daemon. It can be downloaded 
from 
http://people.redhat.com/sgrubb/audit  It will also be in rawhide 
tomorrow. The Changelog is:
- Change packet draining to nonblocking
- Interpret id field in ausearch
- Add error message if not able to create log
- Ignore netlink acks when asking for rule & watch list
This is another bug fix release. The intent is to make the audit package 
version 1.0 during the weekend. Please give this testing so that we don't 
need a 1.0.1 on Tuesday. :)
Thanks,
-Steve