Hi, I noticed that in Debian rxvt (a version of xterm not consuming 1.5 MB) updates /var/run/utmp by setuid root. Wouldn't it be safer to have addgroup utmp chgrp utmp /usr/bin/rxvt /var/run/utmp chmod g+s /usr/bin/rxvt chmod g+w /var/run/utmp or something the like? ---david