I believe the proper way to change one's identity is with the following:

if (setgid(gid) == -1 ||
setgroups(1, &gid) == -1 ||
setuid(uid) == -1) {
perror("got root?");
return -1;
}

But what is the proper method if you're using seteuid and setegid? Is
there no setegroups concept? Why not? Will group membership or lack
thereof be respected while running seteuid/setegid?

Thanks,
Mike

[ Post a follow-up to this message ]