Hi, I've just released a new version of the audit daemon. It can be downloaded from http://people.redhat.com/sgrubb/audit It will also be in rawhide tomorrow. The Changelog is: - Add man pages - Reduce text relocations in parser library - Add -n option to auditd for no fork - In auditd.conf add exec option to space_left, admin_space_left, disk_full, and disk_error - eg EXEC /usr/local/script Please let me know if there are any problems with this release. -Steve