Hi Steve! I found another bugs in audit tabel: 1. No rules can be added to exclude,user,entry,task tables. 2. action 'never' can't be set. I tested with audit version 1.7.9 on gentoo system. kernel version 2.6.26-gentoo-r3 - Loredan