Thanks for the info guys. James - I have notified Redhat (thanks again for the contact details); Harry - I forwarded your solution to USCERT (citing you as reference) as they have put this vulnerability note up : http://www.kb.cert.org/vuls/id/632656 Regards, Ben.
