> Is there a reason not to include /var/log/audit/audit.log in the logrotate > regime? Yes, CAPP has requirements that all audit failures be handled appropriately. This includes an error rotating logs. The audit daemon handles its own log rotation. Hope this helps... -Steve __________________________________ Yahoo! Mail - PC Magazine Editors' Choice 2005 http://mail.yahoo.com -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list