i am going to be adding code to /etc/rc to set the securelevel *much* earlier in the boot process (using the same sematics as currently used for transitions).. eg, before any login daemon is run (ie, inetd), or cron, or sendmail, or ... i have it in my local tree, but i have not finished testing. .mrg.