FYI, I am able to do just about everything I wanted to just using seteuid(), so I'm basically happy with the way things stand. [I even got to rewrite some code to drop root privs earlier than it used to :] ==John ------------------------------------------------------------------------------