Hello, I've just released a new version of the audit daemon. It can be downloaded from http://people.redhat.com/sgrubb/audit It will also be in rawhide tomorrow. The Changelog is: - AUDITD_CLEAN_STOP config option in /etc/sysconfig/auditd - When unknown, show raw record in ausearch - Add CWD message type support There are some other minor fixups. -Steve