Hi, I've just released a new version of the audit daemon. It can be downloaded from http://people.redhat.com/sgrubb/audit It will also be in rawhide tomorrow. The Changelog is: - New report about authentication attempts - Updates for python 2.5 - update autrace to have resource usage mode - update auditctl to support immutable config - added audit_log_user_command function to api - interpret capabilities - added audit event parsing library - updates for 2.6.20 kernel There is a major new feature in this release. This represents the first cut at the audit parsing library. This version should be mostly complete except the audit searching functions. They will be filled in during subsequent updates. There is a test program in auparse/test that can be used to exercise the code that is in the library. This drop also includes python bindings. Please let me know if there are any problems with this release. -Steve