How can a group id, be droped?

[Robert Elz]

In article <5365 at columbia.edu>, ji at read.columbia.edu (John Ioannidis) writes:
> Anyway, just removing a group should not ask for
> any special authorization,

This is a mistake, useful things can be done with bsd groups provided
that users can't manipulate them (apart from running a setgid program).

Eg: we have a group "solitary" which we occasionally put troublemakers
into.  A whole bunch of directories are 705 mode, owned by group solitary.

This is remarkably effective.

kre