I have a vague recollection of a program posted to comp.sources a while back that would scan a filesystem and catalog setuid and setgid program files. Can anyone give me a pointer to this, or to similar commercial programs that can be used for a periodic security audit? ++PLS