On Wed, 24 Sep 2003, Dennis von und zu Brok wrote:

> > Make sure it is setuid root, like:
> >
> > -r-sr-xr-x 1 root wheel 16276 Aug 12 02:18 /usr/bin/su
>
> Hm. It is.

Try ktrace to run it. Then use kdump to view the results. Maybe it will
lead you to an answer.

   Jeremy C. Reed
   http://bsd.reedmedia.net/