On Friday 29 July 2005 16:17, Amy Griffis wrote: > Doing something like 'auditctl -l' floods the console with audit > records. This could be normal depending on your rules and what pid it's reporting. If it reports the auditd pid, we have a problem. If it reports auditctl's pid, this might be expected. -Steve