On Wednesday 15 June 2005 18:56, Steve Grubb wrote: > I was doing a test: > > auditctl -a entry,always -S all -F auid=-1 > > It turns out this tends to report auditd doing things: This is now in bugzilla: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160654 -Steve