with linux audit, how do I monitor the deletion of directories? I am already monitoring the unlink syscall, but it only seems to monitor deleted files. thanks Bond