For audit.rules purposes, if the stig.rules from the repo audits on unlink, does that cover rmdir? Thanks! Leam -- Mind on a Mission <http://leamhall.blogspot.com/> -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://listman.redhat.com/archives/linux-audit/attachments/20131025/53a90eee/attachment.htm>