On Monday 28 March 2005 12:05, Timothy R. Chavez wrote: > Thus you really wouldn't know the location of these watches. I prefer keeping it simple. Just dump the whole list. This is how the list rules works. Besides, audit -L | grep '^\/tmp' should get the ones on tmp. -Steve