Hello. laurent_t wrote: > I use Tomoyo 1.8.3 (thanks for this wonderful soft). > I haven't found any information about using syslog instead of auditd to log errors in enforcing mode. > Any idea? Excuse me, but what is your question? Why /usr/sbin/ccs-auditd and /usr/sbin/ccs-notifyd cannot be used? You want to use (e.g.) /sbin/rsyslogd for saving logs read from /proc/ccs/ rather than running /usr/sbin/ccs-auditd and /usr/sbin/ccs-notifyd ?