>making DIP set-uid root does *not* create buffer overrun problems, >which were fixed long time ago.How very incorrect. They were not "fixed" a long time ago. Dip buffer overruns can still be found on just about any site that didnt keep up with bugtraq.. Any badly managed system will have these problems. Some systems, are so bad as to not have shadow support yet!! Like halcyon.com for example. ---------------------------------------------------------------------- Cosimo Leipold | Unix Administrator Aiglon College | Web Page Development 1885 Chesieres-Villars | NT Administrator Switzerland | http://www.clark.net/pub/cosimo ----------------------------------------------------------------------