This is something that may have been talked about before. If thats so simply forget this message. In any case it has come to my attention recently that at least in HP-UX 09.01 there exists a suid shelll script that does not use full path names for its commands. And we all know what that entails. In any case I know this was discused in HPUX usenet group. Just wondered if it ever was discussed here. a1 --- http://panacea.library.ucsb.edu/~aleph1 The Uebercracker Security Web