Hi, first, this is only partly security related. Second this is a philosophical question. We are not talking about critical systems, as such may not be rebooted, even in case of power loss. For systems that are meant to run all the time, the automatic start of services is just a backup system. If this is so important to someone, the only solution is to have an identical system to test (and even that is not a 100% structure). Usually such systems may not be rebootet just to test if they resume normal operation if they are rebooted after a power loss or such. So it is clear, that we have to live with whatever comes, we just have to be prepared to it. I wish to thank whoever reported this, as it gave me the opportunity to test this with a backup machine, and this backup system came up after a reboot after the upgrade without much problems. I assume the critical systems will too, but I cannot reboot them just to test if this will work (not to mention that some systems need about an hour from the shutdown command till they are ready to service again). I also wish to thank the SuSE team for the fast reaction, even if it was not necessary to provide an upgrade to 3.3x, it was the optimal thing to do. Not to mention that security is also a psychological structure, and being able to tell customers "the manufacturer recommended prcedure is allready in place" makes them feel good. mike