An audit.33 kernel is uploading, again to the original yum repository on ftp.uk.linux.org. It fixes the lack of audit_filesystem_init() call in audit_init(), and adds the suggested parameter to audit_expand() to specify how much to expand the skb by. There's an audit.34 building, with a different fix for the avc deadlock which was observed, and with module signing disabled on ppc64. There'll probably also be an audit.35 by the end of the day too, with errors from netlink_unicast() in audit_send_reply() handled, and with the abuse of va_args in audit_log_vformat() fixed. You're not allowed to use va_args twice, so this is wrong: len = vsnprintf(skb->tail, avail, fmt, args); if (len >= avail) { <...> len = vsnprintf(skb->tail, avail, fmt, args); -- dwmw2