On Wed, 27 Jun 2001, Jean-Marc Boursot wrote: > Yep but "false" (or "true") is NOT a shell. So they won't be able to > execute chsh and change their login shell to a real one. What about procmail, for example? If it is an mail-only account, it may have procmail, and if you have procmail, you can execute anything, that is not a shell-script or does not need a shell. And I'd say to chsh you do not need a shell. Hochachtungsvoll, Bernhard R. Link