On 10/03/2011 12:34 PM, Hiisi wrote: > Have you rebooted/restarted auditd since that? I only reboot for kernel updates and didn't know auditd would need restarting. I've just tried it and will report back if it works or doesn't.