On Thursday 20 April 2006 19:06, Loulwa Salem wrote: > The problem is reproducible .. and it happens no matter what auditctl > command you try at first (listing, adding watches, or adding rules .. etc) How does lspp.18 do? It seems more stable to me than lspp.17. Also, what SE Linux policy do you have loaded ? Thanks, -Steve