Morning all! My first post to the list.

I'm getting errors on a RHEL 5 box when I add audit rules for chown32 and lchown32.

Info on the box:

Linux myhost 2.6.18-348.6.1.el5 #1 SMP Fri Apr 26 09:21:26 EDT 2013 x86_64 x86_64 x86_64 GNU/Linux


Error:

service auditd restart
Stopping auditd:                                           [  OK  ]
Starting auditd:                                           [  OK  ]
Syscall name unknown: chown32
There was an error in line 215 of /etc/audit/audit.rules


Line 215:
-a exit,always -F arch=b64 -S chown32


What else can I look at to trouble-shoot?

Thanks!

Leam