On Wednesday 22 June 2005 02:57, David Woodhouse wrote: > (I'm not sure if 'user' is the name that Steve actually chose when > adding this functionality to auditctl, but I strongly suspect that'll be > the case.) Correct. I documented it in the man page as well. -Steve