_audit_ rebased to version 2.4.5 The _audit_ package, which provides the user-space utilities for storing and searching the audit records generated by the *audit* subsystem in the Linux kernel, has been rebased to version 2.4.5. This update includes enhanced event interpretation facilities that provide more system-call names and arguments to make the understanding of events easier. This update also has an important behavior change in the way that *auditd* records events to disk. If you are using either `data` or `sync` modes for the *flush* setting in *auditd.conf*, you will see a performance decrease in *auditd's* ability to log events. This is because it was previously not properly informing the kernel that full synchronous writes should be used. This was corrected, which has improved the reliability of the operation, but this has come at the expense of performance. If the performance drop is not tolerable, the *flush* setting should be changed to `incremental` and the *freq* setting will control how often *auditd* instructs the kernel to synchronize all records to disk. A *freq* setting of `100` should give good performance while making sure that new records are flushed to disk periodically.