In contradiction to the manual, the system call setreuid(2) can change the real uid of a non-superuser process - in fact setreuid(geteuid(), -1); works (BSD4.2). Is this desirable? -- Andries Brouwer -- CWI, Amsterdam -- {philabs,decvax}!mcvax!aeb