Hi, I'm getting closer to releasing the next version of the audit daemon. I'm wanting to include a file that has sample auditctl rules demonstrating how to do various things. I'm open to ideas. What common tasks should be included? Note the file will be installed in the docs directory rather than being the default ruleset. -Steve Grubb