> whatever else they choose to do, but they could at least provide the means > for others to easily replace these with static versions by the client's own > discretion. They could also provide a standard option so that you can pick between 1. All binaries ignore LD_* 2. All libraries on LD_* paths must be root or bin owned (id <100 etc) 3. Existing behaviour. So you can lock down tight if you want. LD_LIBRARY path is great for development but not always for other things. Alan