On Thu, 2012-08-23 at 19:28 -0700, William Roberts wrote: > I am trying to locate those patches for auditing, can someone please > point us in the right direction? > > Are these them? > https://www.redhat.com/archives/linux-audit/2011-October/msg00030.html That was one version of them. They were mainlined in Linux 3.3, commit 29ef73b7a82. Then you have to enable CONFIG_AUDITSYSCALL in your kernel configuration. -- Stephen Smalley National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.