In RHEL 6.2, the /usr/share/doc/audit-2.1.3/nispom.rules page says: ... ## Set failure mode to panic -f 2 ... Yet, I do not see a "-f" option documented in the audit.rules(7) man page. man auditd shows a -f option, but that does not look applicable. Is this option an artifact of an earlier rev of auditd, and no longer applicable now? I see an option in /etc/audit/auditd.conf, "disk_full_action = ", that seems to closely match what that nispom option seems to be trying to do. If the "-f" option is current, where is it and those other nispom options documented? Regards, Scott