On Tuesday 07 November 2006 11:23, Smith, Steven G (Steven) wrote: > The problem is that I need to have the links there for various reasons. Is > this a bug in auditd, or did I do something stupid? This message is coming from auditctl. Have you tried using bind mounts instead of symlinks? -Steve