Our policy restricts setuid to as little as possible usage. I've removed the setuid permissions from the /bin/passwd as I thought I could use it with sudo instead. I'd like to allow any user to run passwd but only with an argument that is their username. Is this possible? or is there a better way? thanks, -Mark