With linux 2.6, capset can be a module, which effectively breaks bind9 (fatal: capset failed). Regrettably, the return from the syscall is identical if the module is not compiled in, or if you lack permission to do the capset() call. (Both return EPERM.) Working on a patch, but wondering if anyone else has run into this. lamont