Hi, If a user has set the failure flag to panic, does it make sense for the kernel to panic if there's no audit daemon? (Meaning that messages are going to syslog.) The reason I ask...is what if during shutdown, the rate is exceeded or the backlog becomes full, thus triggering a panic before shutdown of the audit daemon completes? -Steve