> does the default syslog.conf log all usage of the "su" command ? if so > may i knoe where ? There is logging of su in /var/log/auth.log Andrew --------------------------------------------------------------------------- Andrei S. Ivanov c680789@showme.missouri.edu UIN 12402354 http://members.tripod.com/AnSIv <--Little things for Linux.