> It should work, have you tried changing the order, or just using full_audit ? I have enabled the line below: Vfs objects = acl_xattr I disabled all other modules, I just left full_audit. The problem is even when I leave only the full_audit enabled.