> Incidentally here's a sample from my logs for ipc:
> auditctl -a entry,always -S ipc

> type=SYSCALL msg=audit(1115734892.933:11104482): syscall=117 arch=40000003
> success=yes exit=0 a0=18 a1=9000e a2=100 a3=0 items=0 pid=22636 loginuid=525
> uid=525 gid=525 euid=525 suid=525 fsuid=525 egid=525 sgid=525 fsgid=525
> comm="firefox-bin" exe=/usr/lib/firefox-1.0.3/firefox-bin

> There doesn't seem to be any supplemental records. I'll investigate.
shmctl normally does have at least one supplemental record, is that what you
ran to generate this record?