It appears that sshd is trying to write to /dev/log from it's "privsep" process after the chroot. Should we have a bind mount or something to enable this logging? -- http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark http://www.coker.com.au/postal/ Postal SMTP/POP benchmark http://www.coker.com.au/~russell/ My home page