Hey Steve,
I've discovered a rather unsightly segfault in the ausearch code, it seems
that ausearch will segfault if the audit.log file is not found. While I
first saw this problem while I was experimenting with getting /var/log to
exist on a loopback device (something we've done successfully for testing),
I have been able to recreate by simple renaming audit.log.
The following is the command used to generate the error, and while I
haven't exhausted all options, it seems to be the only one generating it.
[root@lnxltc08 permissions]# ausearch -m USER
Segmentation fault
Mike