Hello, I've just released a new version of the audit daemon. It can be downloaded from http://people.redhat.com/sgrubb/audit. It will also be in rawhide soon. The ChangeLog is: - Fix NULL poiinter deref in auparse - Optionally add dependency to libcap-ng in audit.pc This is another bug fix release. The NULL ptr deref in auparse is crashing auditd. And this adds a missing library dependency in the package config file reported by Laurent. Please let me know if you run across any problems with this release. -Steve