Comment 12 for bug 388746

I'm pretty sure upstart needs patching. I want the events generated from a place that would be hard/impossible to bypass so that audit logs are accurate.