>Can you check /var/log/audit.log also? He won't have anything here unless the audit daemon is installed and running. For people who don't know about the audit daemon...if running, the kernel sends all audit messages to it rather than syslog. By default, it stores the audit messages in /var/log/audit.log. If installing, use the one in rawhide. The audit daemon will automatically enable auditing at startup, so you do not need to pass any flags to the kernel from grub. Hope this helps... -Steve Grubb __________________________________ Do you Yahoo!? Meet the all-new My Yahoo! - Try it today! http://my.yahoo.com
