> How do i use this audit software, can any cite me with examples Check the man pages, the auditctl man page has some examples. There are also examples (although some are outdated) in the contrib folder of the compressed source code (http://people.redhat.com/sgrubb/audit/index.html) Steve