Steve: Your audit.rules file for STIG compliance is mostly geared towards RHEL 5 systems? When I try to run it on a RHEL 4 system it complains about the filters (-k) and other things. Thanks. David Flatley CISSP