All:

When using linux kernel-smp-2.6.9-42.0.10.EL and audit-1.0.14-1.EL

In the audit.rules files

-a entry, always -S chmod

errors out.  Does not recognize 'chmod'.

It works in kernel-smp-2.6.9-42.EL given the same audit rpm

Is the syscalls list for 2.6.9-42.0.10.EL radically different, and if so, is there a list of the syscalls available for audit somewhere?