This is on a read-only root filesystem that is built the way we want it. (Squashfs, I believe.) There aren't any, and can't be, any links to names we don't wish to give suid permission to. -- Jim -----Original Message----- Where's the check for what applets are allowed? What stops you from running wrapper ash?