In System V R2 they've added: If the effective user ID of the calling process is not super-user, but the saved set-user (group) ID from exec(2) is equal to uid (gid), the effective user (group) ID is set to uid (gid). to setuid. If you have SVR2 you are in luck. -Ron