This was fixed in RHEL6 as BZ 670328, but never upstreamed. Eric Paris (1): audit: include subject in login records Richard Guy Briggs (1): audit: remove superfluous new- prefix in AUDIT_LOGIN messages kernel/auditsc.c | 10 ++++------ 1 files changed, 4 insertions(+), 6 deletions(-)