hello all. My system is centos 5.x and there is no module related auditd there is no process(daemon) related auditd and selinux definately disabled. But I can see lots of auditd messages like below. Oct 20 02:01:01 linux kernel: type=1106 audit(1224435661.064:65210): user pid=25860 uid=0 auid=0 msg='PAM: session close acct="root" : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' Is there any way to disable this messages? if I should change /etc/audit/auditd.conf file, please let me know which config should I change. Thanks in advance. _________________________________________________________________ 녹돌이의 A+ 중간고사 준비 노하우 공개! 지금 클릭하세요! http://mswindowslive.tistory.com/54