In pam_xauth.c: The function do_file makes use of an action struct. One of the things it does is trunacate its length to action.size and then mmap it. However, the function mangle_refcount calls it without necessarily assigning a.size to something. This causes su to generate a very large file under ~/.xauth/refcount/root/localhost.localdomain/unix\:0 and then it dies with a "Bus Error" signal. Please let me know when a fix is available. Regards, Shlomi Fish -- ---------------------------------------------------------------------- Shlomi Fish shlomif@vipe.technion.ac.il Home Page: http://t2.technion.ac.il/~shlomif/ Home E-mail: shlomif@techie.com He who re-invents the wheel, understands much better how a wheel works.