On Fri, 2005-04-08 at 10:15 -0500, Timothy R. Chavez wrote:
 > I am seeing an inconsistent behavior when testing the watches
with this
 > kernel. Is anybody else encountering something similar?
 >
 
 Just to be clearer, we tested on my working-version of the code, and I _do_ 
 receive records.  I've not touched audit_attach/notify_watch() either. 
I'll double-check my backport of your code.
-- 
dwmw2