Hi Steve, As requested in my previous email, I am interested in understanding the relation between Linux audit kernel and user space audit. Will a audit kernel available with Linux kernel 2.6.32 compatible with user space audit 2.6.X? I understand you might be busy with your regular schedules. :-) Regards, Ketan From: Bhagwat, Shriniketan Manjunath Sent: Monday, July 11, 2016 1:48 PM To: 'Steve Grubb' <sgrubb(a)redhat.com&gt; Cc: linux-audit(a)redhat.com Subject: Upgrading audit package Hi Steve, I am using audit in my development environment. My development environment is as below. RHEL 5.2 with kernel 2.6.32-431.el6.x86_64 and audit-2.2-2.el6.x86_64. SUSE 11 SP3 with kernel 3.0.76-0.11-default and audit-1.8-0.30.1 As I understand the above audit packages I am using in my environment are user space audit. I want to upgrade it to the latest version. If I upgrade the audit packages to latest version 2.6.X will there be any issues? Linux Audit kernel available with kernel 2.6.32-431.el6.x86_64 and 3.0.76-0.11 are compatible with user space audit 2.6.X? In your opinion what is the suitable audit package for my environment to upgrade? If these topics are already documented please guide me to the documentation. Regards, Ketan