the Mandatory Access Controls not only allow only programs known to be installed by somone with that clearance to be run, but also would restrict the access of '.' for execution because the other permissions that would need to be on the object. Besides this, I use esh, scsh, zsh and rc! where is parsing for the _alternative_ shells! =)