Kam Leo wrote: > I was searching for audit.log in /var/log to find why the FC5 vmware > client was generating avc denied messages. I, then, realized that > audit was not installed. Can anyone tell me why audit is not installed > by default in FC5? See Dave Jones' livejournal: http://kernelslacker.livejournal.com/32574.html Or that audit is a resource hungry pig (Well, ok, this isn't news) ... Given that most users don't actually give a **** about audit, this is incredibly wasteful. Thankfully it's going to be turned off for FC5 final. (Perhaps then my /var/log/audit won't take up a large percentage of my /var partition either). Hope this helps, James. -- E-mail address: james | In the Royal Air Force a landing's OK, @westexe.demon.co.uk | If the pilot gets out and can still walk away. | But in the Fleet Air Arm the outlook is grim, | If your landings are duff and you've not learnt to | swim.