diff --git a/audit-1.6.8-zos.patch b/audit-1.6.8-zos.patch
new file mode 100644
index 0000000..2e033d1
--- /dev/null
+++ b/audit-1.6.8-zos.patch
@@ -0,0 +1,12 @@
+diff -ur audit-1.6.8.orig/audisp/plugins/zos-remote/policy/audispd-zos-remote.te audit-1.6.8/audisp/plugins/zos-remote/policy/audispd-zos-remote.te
+--- audit-1.6.8.orig/audisp/plugins/zos-remote/policy/audispd-zos-remote.te	2008-02-14 11:52:34.000000000 -0500
++++ audit-1.6.8/audisp/plugins/zos-remote/policy/audispd-zos-remote.te	2008-02-14 11:58:01.000000000 -0500
+@@ -9,8 +9,8 @@
+ 
+ ## use below if selinux-policy_devel > 3:
+ ## zos_remote_application_domain(zos_remote_t, zos_remote_exec_t)
+-logging_audisp_system_domain(zos_remote_t, zos_remote_exec_t)
++##logging_audisp_system_domain(zos_remote_t, zos_remote_exec_t)
+ 
+ ## use below for RHEL5 series:
+ init_system_domain(zos_remote_t, zos_remote_exec_t)
diff --git a/audit.spec b/audit.spec
index ea2b984..0584884 100644
--- a/audit.spec
+++ b/audit.spec
@@ -1,16 +1,17 @@
 %define sca_version 0.4.5
-%define sca_release 3
+%define sca_release 4
 %define selinux_variants mls strict targeted
 %define selinux_policyver 3.0.8 
 
 Summary: User space tools for 2.6 kernel auditing
 Name: audit
-Version: 1.6.7
+Version: 1.6.8
 Release: 1%{?dist}
 License: GPLv2+
 Group: System Environment/Daemons
 URL: http://people.redhat.com/sgrubb/audit/
 Source0: http://people.redhat.com/sgrubb/audit/%{name}-%{version}.tar.gz
+Patch0: audit-1.6.8-zos.patch
 BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 BuildRequires: gettext-devel intltool libtool swig python-devel
 BuildRequires: kernel-headers >= 2.6.18
@@ -94,6 +95,7 @@ A graphical utility for editing audit configuration.
 
 %prep
 %setup -q
+%patch0 -p1
 mkdir zos-remote-policy
 cp -p audisp/plugins/zos-remote/policy/audispd-zos-remote.* zos-remote-policy
 
@@ -304,6 +306,12 @@ fi
 %config(noreplace) %{_sysconfdir}/security/console.apps/system-config-audit-server
 
 %changelog
+* Fri Feb 15 2008 Steve Grubb <sgrubb@redhat.com> 1.6.8-1
+- New upstream version
+- Cleanup descriptors in audispd before running plugin
+- Fix 'recent' keyword for aureport/search
+- Add detection of failed group authentication to audisp-prelude
+
 * Thu Jan 31 2008 Steve Grubb <sgrubb@redhat.com> 1.6.7-1
 - New upstream version
 - Adds prelude IDS plugin for IDMEF alerts
diff --git a/sources b/sources
index cf1ebad..a0c7f6e 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-589a5e3a33ee8df891fc83bddca79f5d  audit-1.6.7.tar.gz
+67cd6d2995bbb0a8b3c37ce484d758f5  audit-1.6.8.tar.gz