I'm not too sure why the paste didnt work.. I'll try again using plain text: Hello all, Ive got SuSE 6.1 running on one of my machines and awhile back, i downloaded Marc's security crons.. just recently, i received an email that showed "The following programs have got a new suid and/or sgid bit:" basically, every suid program has a new bit.. here's a snippet.. --- snip --- - -rwsr-xr-x 1 root tty 135501 Dec 3 02:07 /opt/kde/bin/kvt - -rwsr-xr-x 1 root root 6220 Dec 3 02:07 /opt/kde/bin/kcheckpass - -r-sr-sr-x 1 root root 374852 Dec 2 01:53 /usr/sbin/sendmail - -rwsr-xr-x 1 man root 70028 Dec 2 01:46 /usr/bin/man - -rwsr-xr-x 1 root root 25052 Dec 2 01:46 /usr/bin/crontab --- snip --- + -rwsr-xr-x 1 root tty 135501 Dec 3 1999 /opt/kde/bin/kvt + -rwsr-xr-x 1 root root 6220 Dec 3 1999 /opt/kde/bin/kcheckpass + -r-sr-sr-x 1 root root 374852 Dec 2 1999 /usr/sbin/sendmail + -rwsr-xr-x 1 man root 70028 Dec 2 1999 /usr/bin/man + -rwsr-xr-x 1 root root 25052 Dec 2 1999 /usr/bin/crontab --- snip --- The machine was up since Dec 2.. and was recently moved and had to be rebooted... the only thing that really changed was a kernel update that took effect after the boot.. would a kernel update cause the above changes? Thanks, Chrissy