According to the docs provided with xcdroast on my FreeBSD 4.10-STABLE box xcdroast causes the file "xcdwrap" to be executed SUID. The xcdroast manual indicates that it has to be run first as root, after which ordinary users can run it, which is consistent with the wrapper being SUID. This may be too much of a hole for some people (like me). Mike Squires