Found undocumented attribute in xcatd and added some more info to auditnosyslog
 missed a path