On Wednesday 02 May 2007 11:10, Robert Evans wrote: > I see a lot of examples and documentation with the -S flag, and a system > call definition. Is there a file/table that lists all system call > available to audit? I don't have one - but its all syscalls. There are a couple you can't audit on exit, though. -Steve