At 10:23 PM -0500 11/11/06, Gene Heskett wrote: >On Saturday 11 November 2006 19:48, Craig White wrote: ... >>...if you install the 'audit' package, I believe that >>it diverts the 'spew' as you call it from syslog >>to /var/log/audit/audit.log > >And does logrotate currently handle that, or do I need to run that down >and add it? I have audit installed. Logrotate handles the selinux secure logs on FC5. See /etc/logrotate.d/syslog or look at /var/log/secure* -- ____________________________________________________________________ TonyN.:' The Great Writ <mailto:tonynelson@xxxxxxxxxxxxxxxxx> ' is no more. <http://www.georgeanelson.com/>