Hi, I've just released a new version of the audit daemon. It can be downloaded from http://people.redhat.com/sgrubb/audit It will also be in rawhide soon. The Changelog is: - gen_table.c now includes IPC defines to avoid kernel headers wild goose chase - ausyscall program added for cross referencing syscall name and number info - Add login session ID search capability to ausearch This release is mostly to fix a build problem on non-red Hat systems. It seems that the low level ipc.h is kept in many places. So, to avoid problems, I copy and pasted the defines we need into all the places that need it. This release also includes a new program ausyscall that can be used to cross reference syscall names and numbers. This would be important for verifying the need to have 2 rules on biarch systems. This release also adds support for searching by login session IDs on 2.6.25 and later kernels. Please let me know if you run across any problems with this release. -Steve