Description of change/FAQ addition. If a change, include the original text first, then the changed text: auditd is enabled by default in rawhide, watch this for SELinux relevancy. Version-Release of FAQ (found on http://fedora.redhat.com/docs/selinux-faq-fc3/ln-legalnotice.php), for example: selinux-faq-1.3-8 (2005-01-20-T16:20-0800)
"With auditd running, audit messages are directed to /var/log/audit/audit.log or whatever file is specified by /etc/auditd.conf." Thanks to Stephen Smalley for the nice summary.
Note that you can enable audit with: auditctl -e 1
*** Bug 155302 has been marked as a duplicate of this bug. ***
In relnotes for FC4test3.