Jeremy Ardley wrote: .. > Selinux has a lot of the hooks to do this - in permissive mode of course = > > - but I don't think it can identify the calling script without you going = > > to great lengths to tag files. right, i'm aware of the existence of Selinux, but have not looked into it further. songbird