According to the replies i got so far, sgid bit on directories dont represent a risk. Then, I still wonder why tiger classifies this as an 'ALERT'? Marc.