Sorry for the off-topic question: this is the only security-type list I'm a member of. Please point me to a better place to ask if there is one. I've just been looking at the 'rounds' options for sha512 password hashing. According to the man pages, you can set rounds options in: 1) /etc/libuser.conf 2) pam_unix 3) /etc/login.defs. Now I'm confused: is this really 3 different places to set the same thing? Do they all need to be set? Which is used under what circumstances? What happens if they are set differently? Moray. "To err is human; to purr, feline." -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux