Hi, kernel/auditfs.c --> fs/audit.c ? Any other [less] confusing suggestions. Or are people happy with this? To ease the pain of getting this upstream, eliminating confusion where possible seems to make sense. -tim