>Much better is to start it off as root, let it run that way just long >enough to set its group list, and then setuid to someone boring and >do whatever might have bugs... I agree. My mail was pointing out that the idea of using SGID as a way of avoiding being root was flawed.