> I mean for you to force a crash or rather an permission error and see if the > behavior happens before or after it depending on which place you lock down. > Then you will know what component is actually affecting your behavior. Ah, understood. OK, will try that. Thank you. No idea why so many of /tmp are listed in lsof?