Hello, We just released a new version of the audit package. It can be downloaded from: https://github.com/linux-audit/audit-userspace/releases/ The ChangeLog is: - Truncate overlong comm values instead of rejecting them - create /run/audit via tmpfiles - install bash completions under per-command names - Better validate numeric values when parsing logs and config options - make GSS handshakes nonblocking - Fix a couple non-thread safe collisions in libauparse - allow tls_psk_file to be optional with per-identity keys This is a "do over" release to fix the rejected events when the comm field is improperly sized. A couple other cleanups were added. If you are packaging this note the change to bash completions and adding /run/audit by systemd temp files. If you notice any problems with this release, please let us know. SHA256: 42876d195ee2ded19e5f72d7664096eee314928aa36ad346719ba5b25818fc84 -Steve PS - Does anyone use audispd-zos-remote? I'm considering dropping it as it hasn't been meaningfully updated in almost 20 years and needs some work.