On Wednesday 11 May 2005 14:29, Timothy R. Chavez wrote: > Patch appears at bottom of message. In audit_remove_watch, could we do this: + ret = -ENOENT; It makes more sense in the auditctl messages when deleting a watch that doesn't exist. We currently get permission denied which is not the case. -Steve