Hello Eric,Are there any reasons why this patch is not in mainline?https://www.redhat.com/archives/linux-audit/2010-March/msg00010.htmlI upped it to 3.0.3 version.Best regards,Maxim.