On Thursday 28 September 2006 16:05, Michael C Thompson wrote: > > This patch introduces two new point in the code where audit records are > > generated for newrole. Both points are when the attempt to newrole fails. >From an audit perspective I think it does the right thing. ACK. -Steve