On Thursday 12 October 2006 06:51, John D. Ramsdell wrote: > One quick question, I notice autrace.c invokes /sbin/auditctl to > change audit rules, but shouldn't it being using audit_add_rule and > friends instead? It was using auditctl just for expedience when the program was written. I can add the code to switch it over. -Steve