Oh, you might have been confusing utmpd with update_utmp, which is a setuid program Solaris uses so non-root programs can frob utmp{,x} in limited ways. pututline() and pututxline() exec update_utmp if you aren't running as root, but all update_utmp does is call pututline() or pututxline() again after verifying the data. -- Dan