Jason Thorpe wrote:

[...]
> Note, Darwin provides a kauth_cred_get (),
[...]

I'll add that.

> (Darwin's is more complicated, because the Darwin kernel supports 
> binding different credentials to each thread in a process...)

...which is related to another issue that I believe you opened long
time ago about systrace's privilege elevation in the LWP world. :)

-e.

-- 
Elad Efrat