I've posted a webrev at http://cr.opensolaris.org/~fourctom/audit_02_dec_2008/ that contains a number of fixes for bugs in the SMF audit code. Specifically, there are fixes for these bugs:
6658408 rc_node_create_child() and rc_snapshot_take_new() leak memory at audit_data.ed_auth 6658412 svccfg can segfault in _scf_set_annotation() 6670384 svc.configd core dumping in start_audit_session() 6681995 svc.configd core dumping in rc_node_setup_tx() 6721855 svccfg dumps core with "_scf_set_annotation() failed with unexpected error 1007" 6769214 osol-0811-101a-rc1b.iso svc.configd core in virtual box I would appreciate any feedback that you have. tom