Hi Steve, I discovered a usability bug in auditctl while attempting to load rules from a file. When auditctl reaches a line containing only whitespace, it silently terminates, without loading the remainder of the rules. I suppose either continuing on, or terminating with an error message would be acceptable behavior. Thanks, Amy