I'm curious to know what this 'kernel auditing code' is. I guess it is something recently implemented. I tried goggling for it, but the only thing coming up is a recent denial of service issue. Apart from going through the source, anyone know of any good sites that talk about it? Marco