<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> <HTML> <HEAD> <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"> <META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7226.0"> <TITLE>auditing support for FC2 w/ kernel 2.6.10-1.771_FC2 </TITLE> </HEAD> <BODY>  Greetings, I'm trying to get audit support working w/ FC2 and kernel 2.6.10 (provided from a yum repository and recompiled from that source). The issue is that even when both audit support and syscall auditing are flagged on in .config, when the system is booting with a rebuilt kernel, I am not seeing a /dev/audit device file, so the audit software I'm trying to use fails. I'm trying to use laus, a third party application written by Novell, which builds fine from source, but fails due to lack of /dev/audit. I have tried to mknod the device file myself with no success, it still complains about not having the audit device. Does anyone have experience with a similar scenario? Am I going about this the wrong way? Thanks for your time! Derek Verbeeck System Administrator Advanced Acoustic Concepts 631-273-5700 ext 2305 </BODY> </HTML>