Somebody in the thread at some point said: >>> >>> # Feel free to add below this line. See auditctl man page > # Feel free to add below this line. See auditctl man page > > -a exit,always -S chroot > #-a exit,always -S chdir -F obj_type=dhclient_t > There was an error in line 27 of /etc/audit/audit.rules > [root@coyote audit]# vim audit.rules I would just delete everything after the "feel free" comment and retry. Back up the file first if you like. -Andy