Okay, so I edited the kernal configuration to enable system call auditing, as suggested in the posting by Steve Grubb. Then I recompiled the kernel and installed it. To my delight, the problems went away and "auditctl" now seems to work. Thanks Steve! -- Bill