Hi all - I'm trying to find the easiest way to allow most all commands to be run, but disallow things such as "vi /etc/passwd" or "vi /etc/shadow". Any hints? I'm running 1.6.8rc1 with LDAP support. Thanks, Jake Jacob Pszonowsky jdp16 at mac.com (c) 415.225.2647 (f) 415.358.5918