I'm sorry if this has been discussed before. There is a major security problem with auditing under solaris 2.3 and 2.4. If you run bsmconv to turn on auditing, any user can break root very very easily. I'ld say more but I'ld like to give sun at least a little bit of a chance to fix it first. I have access to the source code for the os and have tracked down the one line of bad code. How can I contact Sun to tell them the problem with this line of code????????????? --- dowiii@ksu.ksu.edu Dow Summers Computing and Network Services Kansas State University