Hello, We just released a new version of the audit package. It can be downloaded from: https://github.com/linux-audit/audit-userspace/releases/ The ChangeLog is: - Update syscalls and io_uring tables for the 7.0 kernel (Hilko Bengen) - Code cleanups (mikhailnov) - Avoid blocking auditd while handling disk space alerts - Tighten auditctl permission checks and rule deletion handling - Fix ausearch and auparse parsing for several newer record types - Prevent queue resize races in audisp and oversize records in af_unix - Fix memory safety issues in auparse and the audisp filter plugin - Improve reliability of audisp-remote, auplugin, and the ids plugin - Fix stats collection and parsing in the audisp-statsd plugin - Refresh ausearch and aureport man pages This is a big bugfix release. If you are using audit4.1.x, I strongly recommend updating. I won't go into details. There are over 40 bug fixes. Many found by static analysis rather than reported problems. If you notice any problems with this release, please let us know. SHA256: 8396544ea08c69b39f5c00027549394f2149b31c4a9e693097d6ce134f3ffe3d -Steve