I suspect nearly everybody has a security hole on their system. (some of you can guess... please wait a few weeks) I would strongly suggest the following patch: ftp://ftp.fuller.edu/Linux/symlink-attack-patch-2.1.71 I hope that patch gets in the kernel soon, default to "Y".