This patch was created to add the armv6l (Raspberry Pi) platform to audit. Without the patch auditctl errors that it cannot find the machine type whenever loading the rules file. This patch was tested on a physical raspberry pi board. The environment was the latest Raspbian distribution and the latest audit from the SVN. Upon the loading of the rules file, I was able to test the clone, execve, and fork system calls using a back patch for the Raspberry Pi kernel (they're still on 3.2). Signed-off-by: Nathaniel Husted <nhusted(a)gmail.com&gt; --- diff --git a/lib/machinetab.h b/lib/machinetab.h index 378db6e..60509c4 100644 --- a/lib/machinetab.h +++ b/lib/machinetab.h @@ -37,4 +37,5 @@ _S(MACH_ALPHA, "alpha" ) _S(MACH_ARMEB, "armeb" ) _S(MACH_ARMEB, "armv5tejl") _S(MACH_ARMEB, "armv7l") +_S(MACH_ARMEB, "armv6l") #endif