I'm getting a non-fatal { getattr } denial on a UDP socket (talking to a DNS server). strace doesn't show any fstat calls on the socket, but it does show that recvfrom is being called. Does recvfrom want getattr permission in order to retrieve the message source? (The other potential system calls are poll and ioctl(FIONREAD).) -- ======================================================================== Ian Pilcher arequipeno@xxxxxxxxx -------- "I grew up before Mark Zuckerberg invented friendship" -------- ========================================================================