Hello, I filed the following bugzilla reports to help track some of the last remaining issues: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160518 Summary: audit: file system and user space filtering by auid https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160522 Summary: audit: teach OOM killer about auditd https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160524 Summary: audit: file system attribute change tracking https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160526 Summary: audit:PATH record mode flags are wrong sometimes https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160528 Summary: audit: file system watch on block device