I just discovered that I can log into my FC1 box as root with either the root password, or by simply leaving the password blank! Functions this way from a command line, or in a terminal within either KDE or Gnome. Can anyone suggest where to look to stop this behavior. This was a RH9 box upgraded to FC1, and has all current patches applied. Thanks. Bill