It's also worth looking at Cfengine to ensure that your hardening changes stay in place after you initially set them. -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca