On Tuesday, March 11, 2014 06:15:17 PM Richard Guy Briggs wrote: > Is zero a valid value for the pid member of the AUDIT_SIGNAL_INFO message? Well, pid=0 would be the kernel. So, its valid but unlikely. Offhand I don't know why the kernel might try sending a signal. Is this a problem? -Steve