Hi, Is it possible to catch invoking a new process by the audit subsyetm? Regards, Kevin _______________________________________________ Kernelnewbies mailing list Kernelnewbies@xxxxxxxxxxxxxxxxx https://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies