Hey Steve,

I've discovered a rather unsightly segfault in the ausearch code, it seems that ausearch will segfault if the audit.log file is not found. While I first saw this problem while I was experimenting with getting /var/log to exist on a loopback device (something we've done successfully for testing), I have been able to recreate by simple renaming audit.log.

The following is the command used to generate the error, and while I haven't exhausted all options, it seems to be the only one generating it.

[root@lnxltc08 permissions]# ausearch -m USER
Segmentation fault


Mike