Hi, Cygwin is not a Microsoft software. Please contact Cygwin support to get more professional support. Meanwhile, if you are running Windows XP, please post in the following forum. http://social.technet.microsoft.com/Forums/en/itproxpsp/threads Best Regards, Niki Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi, I activated file (object) access audit on my Windows XP for a parent directory and all its children and tested its operation by browsing subdirectories and opening files there and seeing the actions as security logs (huge number of them) in event viewer. However, when I opened a Cygwin window and moved to that directory (cd /cugdrive/.....) and created a subdirectory and also created a file (using "mkdir" and "cat > filename"), none of those actions showed up in the security logs. Is there something in Cygwin that can trick the audit? is it a security hole? Thanks Mike

Hi, Cygwin is not a Microsoft software. Please contact Cygwin support to get more professional support. Meanwhile, if you are running Windows XP, please post in the following forum. http://social.technet.microsoft.com/Forums/en/itproxpsp/threads Best Regards, Niki Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.