turn off viewing not owned processes for regular users? possibility to turn off netstat, sysstat and similar commands will be nice too. the best would be to prevent user from getting any system-wide information other than needed. i use -current, with 1.5.* i had patch for this, but it doesn't work at all in -current (doesn't compile).