On Fri, 2005-04-22 at 06:49 +0000, Timothy R. Chavez wrote:
 --- linux-2.6.9~orig/security/selinux/nlmsgtab.c        2004-10-18
21:54:55.000000000 +0000
 +++ linux-2.6.9~audit/security/selinux/nlmsgtab.c       2005-04-13 18:46:31.000000000
+0000
 @@ -95,6 +95,9 @@ static struct nlmsg_perm nlmsg_audit_per
         { AUDIT_DEL,            NETLINK_AUDIT_SOCKET__NLMSG_WRITE },
         { AUDIT_USER,           NETLINK_AUDIT_SOCKET__NLMSG_WRITE },
         { AUDIT_LOGIN,          NETLINK_AUDIT_SOCKET__NLMSG_WRITE },
 +       { AUDIT_WATCH_INS,      NETLINK_AUDIT_SOCKET__NLMSG_WRITE },
 +       { AUDIT_WATCH_REM,      NETLINK_AUDIT_SOCKET__NLMSG_WRITE },
 +       { AUDIT_WATCH_LIST,     NETLINK_AUDIT_SOCKET__NLMSG_WRITE },
  }; 
Doesn't look like it'll drop into the audit.22 rpm as a simple
replacement for the existing auditfs patch, so I'll have to do some
merge work -- which means it'll probably be this evening (au time) at
least before I get a new kernel out.
-- 
dwmw2