Hi, I've just released a new version of the audit daemon. It can be downloaded from http://people.redhat.com/sgrubb/audit It will also be in rawhide tomorrow. The Changelog is: - Change packet draining to nonblocking - Interpret id field in ausearch - Add error message if not able to create log - Ignore netlink acks when asking for rule & watch list This is another bug fix release. The intent is to make the audit package version 1.0 during the weekend. Please give this testing so that we don't need a 1.0.1 on Tuesday. :) Thanks, -Steve