Does anyone know how to get audit to see the command strings on the command itself. I know I can get that if I install PaX and GSCSecur, but both require kernel hooks. The boxes that I am working on are in production and there no way I can do rebuild kernel. We have audit installed, but we cant's see command line parameters. Last command and sa are set up, but the same issue. Payne -- Command, n.: Statement presented by a human and accepted by a computer in such a manner as to make the human feel as if he is in control. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org