All:
 
When using linux kernel-smp-2.6.9-42.0.10.EL and audit-1.0.14-1.EL
 
In the audit.rules files
 
-a entry, always -S chmod
 
errors out.  Does not recognize 'chmod'.
 
It works in kernel-smp-2.6.9-42.EL given the same audit rpm
 
Is the syscalls list for 2.6.9-42.0.10.EL radically different, and if so, is there a list of the syscalls available for audit somewhere?