I don't believe this change actually fixes the problem. It ignores the case of a setuid program calling a shell. ------------------------------------------------------------------------------