The description for la_symbind* says: If the auditing library is simply monitoring symbol bindings, then it should return sym->st_name. This should be "sym->st_value". The example in the end gets it right. -- To unsubscribe from this list: send the line "unsubscribe linux-man" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html