I've noticed these logwatch messages sent to root. Don't know if this gives a clue. --------------------- ModProbe Begin ------------------------ Errors running install command: sound_slot_1 : 7 Time(s) ---------------------- ModProbe End ------------------------- --------------------- pam_unix Begin ------------------------ su: Sessions Opened: peter(uid=500) -> root: 2 Time(s) up2date: Unknown Entries: authentication failure; logname= uid=500 euid=0 tty= ruser=peter rhost= user=root: 1 Time(s) ---------------------- pam_unix End ------------------------- --------------------- Connections (secure-log) Begin ------------------------ Connections: Service sgi_fam: <no address>: 3 Time(s) **Unmatched Entries** gdm[2839]: pam_succeed_if: requirement "uid < 100" not met by user "peter" userhelper[5595]: pam_timestamp: timestamp file `/var/run/sudo/peter/unknown:root' has unacceptable age (35100 seconds), disallowing access to system-config-network for UID 500 userhelper[5595]: pam_timestamp: updated timestamp file `/var/run/sudo/peter/unknown:root' userhelper[5598]: running '/usr/sbin/system-config-network' with root privileges on behalf of 'peter' gdm[2839]: pam_succeed_if: requirement "uid < 100" not met by user "irene" gdm[2839]: pam_succeed_if: requirement "uid < 100" not met by user "peter" userhelper[7845]: pam_timestamp: timestamp file `/var/run/sudo/peter/unknown:root' has unacceptable age (54590 seconds), disallowing access to up2date for UID 500 ---------------------- Connections (secure-log) End ------------------------- Box is a pcchips fsb266 k7 motherboard. Athlon 1700, wdig 40 gb with an ex suse 9.0 install, maxtor 40gb with fedora 2 install ( this is the operating system I'm active/using, the suse hard drive is only used for a backup copy now) . 512 2100 266 ddr, ati 7800 graphics. All updates applied. Peter