<html><body> <tt>> Please try the .11 kernel from David' yum repo and see if that makes a > difference: <a href="ftp://ftp.uk.linux.org/pub/people/dwmw2/audit/">ftp://ftp.uk.linux.org/pub/people/dwmw2/audit/</a> If your whole > machine is full of rawhide packages after March 1, lots of luck. :) </tt> <tt>I installed </tt><tt>kernel-2.6.9-5.0.3.EL.audit.11 on my system. Now it looks like the records are showing up in /var/log/audit.log.</tt> <tt>Thanks!</tt> <tt>debbie</tt></body></html>