Jim Wildman wrote: >Of course /tmp is a scratch pad. Here is what I would do >1) run rpm -Va | grep bin to see if any binaries have been changed > > man, runs forever on my slow laptop. will post any abnormalities later >2) boot single user and wipe everything in /tmp > > doing it whilst logged in as normal, I got them again, upon a restart. As single user is different? >3) boot multi user and try various things, watching /tmp while you do >so. > > will try this. Cheers. Mark Sargent