Morning all! My first post to the list. I'm getting errors on a RHEL 5 box when I add audit rules for chown32 and lchown32. Info on the box: Linux myhost 2.6.18-348.6.1.el5 #1 SMP Fri Apr 26 09:21:26 EDT 2013 x86_64 x86_64 x86_64 GNU/Linux Error: service auditd restart Stopping auditd: [ OK ] Starting auditd: [ OK ] Syscall name unknown: chown32 There was an error in line 215 of /etc/audit/audit.rules Line 215: -a exit,always -F arch=b64 -S chown32 What else can I look at to trouble-shoot? Thanks! Leam -- Mind on a Mission <http://leamhall.blogspot.com/>