OM> Not sure if this is it, but there is a "-" missing before the "S" before "renameat2". This was indeed the issue. I found our that was the issue when I ran "auditctl -l". Thank you. Is there any reason why augenrules and auditctl -R don't print errors to stdout when rules parsing errors occur?