On Mon, 2005-04-11 at 13:40 -0400, Steve Grubb wrote: > On another note...I still don't see any shutdown messages: Is the audit dæmon flushing the queue completely before it shuts down, or just exiting immediately? The message should definitely be in the queue before the signal is delivered. -- dwmw2